CVE-2020-12608

· HIGHModified

← All CVEs

CVSS v3.1

7.8

EPSS

22.40%

Published

May 7, 2020

Modified

Nov 21, 2024

Public PoC / Exploit (2)

All weaponized →

Exploit-DBSolarWinds MSP PME Cache Service 1.1.14 - Insecure File Permissions TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\. This can lead to code execution by changing the CacheService.xml SISServerURL parameter.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-276

Affected Products (1)

solarwinds · managed_service_provider_patch_management_engine (up to 1.1.15)vulnerable

References (6)

http://packetstormsecurity.com/files/157591/SolarWinds-MSP-PME-Cache-Service-Insecure-File-Permissions-Code-Execution.html

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2020/May/23

ExploitMailing ListThird Party Advisory

https://github.com/jensregel/Advisories/tree/master/CVE-2020-12608

ExploitThird Party Advisory

http://packetstormsecurity.com/files/157591/SolarWinds-MSP-PME-Cache-Service-Insecure-File-Permissions-Code-Execution.html

Exploit

KEV Catalog EPSS Scores Vendors All CVEs