Security Advisory

CVE-2020-23834

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-09-04 03:38:40
Last updated 2024-08-04 15:05:11
Assigner mitre
CVSS score 8.8
State PUBLISHED

Description

Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to admin by replacing the %SYSTEMDRIVE%\bd\bd.exe file. When the computer next starts, the new bd.exe will be run as LocalSystem.