CVE-2020-36916

HIGH

TDM Digital Signage PC Player 4.1.0.4 - Privilege Escalation

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-36916. PoCs published by LiquidWorm.

AI-analyzed exploit summary The exploit details an insecure file permission vulnerability in TDM Digital Signage PC Player 4.1, where the 'Authenticated Users' group has modify permissions on critical executables, allowing privilege escalation by replacing them with malicious binaries.

Description

TDM Digital Signage PC Player 4.1.0.4 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files. Attackers can leverage the 'Modify' permissions for authenticated users to replace executable files with malicious binaries and gain elevated system access.

Exploits (1)

exploitdb WRITEUP

by LiquidWorm · textlocalwindows

https://www.exploit-db.com/exploits/48953

View Code ZIP pw:eip

The exploit details an insecure file permission vulnerability in TDM Digital Signage PC Player 4.1, where the 'Authenticated Users' group has modify permissions on critical executables, allowing privilege escalation by replacing them with malicious binaries.

Classification

Writeup 90%

Attack Type

Lpe

Complexity

Trivial

Reliability

Reliable

Target: TDM Digital Signage PC Player 4.1.0.4

Auth required

Prerequisites: Authenticated user access to the system

MITRE ATT&CK