CVE-2020-15261
Unquoted service path vulnerability on Veyon
- State
- Published
- Severity
- 8.0 High
- Published
- Oct 19, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jun 25, 2020
Description
On Windows the Veyon Service before version 4.4.2 contains an unquoted service path vulnerability, allowing locally authenticated users with administrative privileges to run malicious executables with LocalSystem privileges. Since Veyon users (both students and teachers) usually don't have administrative privileges, this vulnerability is only dangerous in anyway unsafe setups. The problem has been fixed in version 4.4.2. As a workaround, the exploitation of the vulnerability can be prevented by revoking administrative privileges from all potentially untrustworthy users.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.0 High | CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H | GitHub_M |
Weaknesses
- CWE-428 Unquoted Search Path or Element
Affected Products
| Product | Versions |
|---|---|
veyonveyon |
|
References
- https://github.com/veyon/veyon/security/advisories/GHSA-c8cc-x786-hqqp
- https://github.com/veyon/veyon/issues/657
- https://github.com/veyon/veyon/commit/f231ec511b9a09f43f49b2c7bb7c60b8046276b1
- http://packetstormsecurity.com/files/162873/Veyon-4.4.1-Unquoted-Service-Path.html
- https://www.exploit-db.com/exploits/49925
- https://www.exploit-db.com/exploits/48246
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.