Local Privilege Escalation Vulnerability in SpeedFan by Alfredo Milani Comparetti
CVE-2020-28175

7.8HIGH

Key Information:

Vendor

Almico

Status
Speedfan
Vendor
CVE Published:
3 December 2020

What is CVE-2020-28175?

A local privilege escalation vulnerability exists in SpeedFan 4.52, developed by Alfredo Milani Comparetti. This flaw allows attackers to execute specially crafted programs, thereby increasing user privileges within the system. As a result, malicious actors could potentially gain unauthorized access to sensitive information or system functions, posing a significant security risk to users.

References

http://www.almico.com/speedfan.php
x_refsource_MISC
https://github.com/y5s5k5/exp/blob/main/exp
x_refsource_MISC
https://github.com/y5s5k5/CVE-2020-28175
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.