CVE-2020-15261 Unquoted service path vulnerability on Veyon
Locally authenticated administrators can escalate privileges to LocalSystem via unquoted service paths in Veyon on Windows.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-15261?
CVE-2020-15261 is a high-severity vulnerability in veyon, published on 19 Oct 2020. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
On Windows the Veyon Service before version 4.4.2 contains an unquoted service path vulnerability, allowing locally authenticated users with administrative privileges to run malicious executables with LocalSystem privileges. Since Veyon users (both students and teachers) usually don't have administrative privileges, this vulnerability is only dangerous in anyway unsafe setups. The problem has been fixed in version 4.4.2. As a workaround, the exploitation of the vulnerability can be prevented by revoking administrative privileges from all potentially untrustworthy users.
Weakness: CWE-428
Which versions are affected by CVE-2020-15261?
It affects 1 product.
Products include Veyon Veyon.
How do I fix CVE-2020-15261?
No fix has been published for CVE-2020-15261 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-15261 being exploited?
There is no known exploitation of CVE-2020-15261 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-c8cc-x786-hqqp.