« Volver al listado

CVE-2020-14418

Estado: ModificadaAlta (7)—

A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Cisco — Advanced Malware ProtectionMadshi — MadcodehookMorphisec — Unified Threat Prevention Platform

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-14418",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-01-30T06:15:12.227",
  "references": [
    {
      "url": "https://github.com/nettitude/metasploit-modules",
      "tags": [
        "Product",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://labs.nettitude.com/blog/cve-2020-14418-madcodehook-library-local-privilege-escalation/",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/nettitude/metasploit-modules",
      "tags": [
        "Product",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://labs.nettitude.com/blog/cve-2020-14418-madcodehook-library-local-privilege-escalation/",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-367"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions."
    },
    {
      "lang": "es",
      "value": "Se presenta una vulnerabilidad TOCTOU en madCodeHook antes del 16-07-2020, que permite a atacantes locales elevar sus privilegios a SYSTEM. Esto ocurre porque el redireccionamiento de ruta puede ocurrir por medio de vectores que involucran uniones de directorio"
    }
  ],
  "lastModified": "2026-06-17T02:54:43.920",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:advanced_malware_protection:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "81FA992B-3F7A-4ACF-A249-BB33C8D1E6CE",
              "versionEndExcluding": "7.2.13"
            },
            {
              "criteria": "cpe:2.3:a:madshi:madcodehook:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD0D2FC5-FCC5-4ABF-9C5A-C9292AC530B6",
              "versionEndExcluding": "4.1.3"
            },
            {
              "criteria": "cpe:2.3:a:morphisec:unified_threat_prevention_platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DEFB07F-D92E-42A7-9472-FAFA5CABB729",
              "versionEndExcluding": "3.5.9"
            },
            {
              "criteria": "cpe:2.3:a:morphisec:unified_threat_prevention_platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5934032F-97AD-4241-8608-F4744B37544A",
              "versionEndExcluding": "4.1.2",
              "versionStartIncluding": "4.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}