CVE-2020-13533 – A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn

A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following registry keys, which reference binaries with weak permissions, can be abused by attackers to effectively ‘backdoor’ the installation files and escalate privileges when a new user logs in and uses the application.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13533

Reference (s):

• https://talosintelligence.com/vulnerability_reports/TALOS-2020-1146
• URL: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1146