VULNERABILITY INTELLIGENCE

CVE-2020-7527

CVSS score7.8 HIGH
EPSS probability0.33%
CISA KEVNot currently listed
Published2020-08-31
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Incorrect Default Permission vulnerability exists in SoMove (V2.8.1) and prior which could cause elevation of privilege and provide full access control to local system users to SoMove component and services when a SoMove installer script is launched.

Weakness classification

  • cybersecurity@se.com: CWE-276

Primary references