Improper Input Validation in Plex Media Server by Plex
CVE-2020-5740

7.8HIGH

Key Information:

Vendor

Plex

Status
Plex Media Server (windows)
Vendor
CVE Published:
22 April 2020

What is CVE-2020-5740?

The Plex Media Server for Windows contains a flaw due to improper input validation, enabling a local, unauthenticated attacker to execute arbitrary Python code with SYSTEM privileges. This vulnerability poses a significant risk as it can be exploited to compromise the system integrity and control sensitive data. It is crucial for users of Plex Media Server to implement security measures to mitigate potential threats from this vulnerability.

Affected Version(s)

Plex Media Server (Windows) Versions prior to 1.19.2.2673-776106bc6

References

https://www.tenable.com/security/research/tra-2020-25
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.