CVE-2020-16282 - In the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the context of the privileged root user

Back Back to CVE browser

HIGH

In the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the context of the privileged root user

Published Aug 20, 2020

8.8

HIGH

CVSS 3.1

EPSS 0.37%

Description

In the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the context of the privileged root user. This may allow a local attacker to break out of the restricted environment or inject malicious code into the application and fully compromise the operating system.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-8243
Advisory
https://www.contextis.com/en/resources/advisories/cve-2020-16282
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-8243		Advisory
https://www.contextis.com/en/resources/advisories/cve-2020-16282		x_refsource_MISCThird Party Advisory