VULNERABILITY INTELLIGENCE

CVE-2020-13542

CVSS score7.8 HIGH
EPSS probability0.61%
CISA KEVNot currently listed
Published2020-12-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing arbitrary commands with System privileges.

Weakness classification

  • nvd@nist.gov: CWE-276

Primary references