CVE-2020-27708 Privilege escalation in Origin

High 7.8 Published 30 Oct 2020 Updated 4 Aug 2024

A non-administrative user can elevate privileges to Administrator or System in the Origin client, allowing full system control.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-27708?

CVE-2020-27708 is a high-severity vulnerability in Origin, published on 30 Oct 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or System. Once the user has obtained elevated access, they may be able to take control of the system and perform actions otherwise reserved for high privileged users or system Administrators.

Weakness: CWE-427

Which versions are affected by CVE-2020-27708?

It affects 1 product.

Products include Ea Origin.

How do I fix CVE-2020-27708?

No fix has been published for CVE-2020-27708 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-27708 being exploited?

There is no known exploitation of CVE-2020-27708 in the wild and no public exploit code.

Sources

Also known as GHSA-8q5h-w4fw-86pr.