CVE-2020-13160 Other in n/a

What is CVE-2020-13160?

CVE-2020-13160 is a critical vulnerability in n/a, published on 9 Jun 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.

Weakness: CWE-134

Which versions are affected by CVE-2020-13160?

It affects 1 product.

Products include Anydesk Anydesk.

How do I fix CVE-2020-13160?

No fix has been published for CVE-2020-13160 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-13160 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-13160 exists.

Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.

Other vulnerabilities in n/a

• CVE-2025-27918 Integer overflow in n/a Critical 9.8
• CVE-2017-14397 AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability. Critical 9.8
• CVE-2021-44426 File upload in n/a High 8.8
• CVE-2016-20094 AnyDesk 2.5.0 Unquoted Service Path Elevation of Privilege High 8.5
• CVE-2019-25261 AnyDesk 5.4.0 - Unquoted Service Path High 8.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5hwp-hcwg-rrjp.