Vulnerability in Flexsense Diskboss
CVE-2020-36879
Flexsense DiskBoss 11.7.28 allows unauthenticated attackers to elevate their privileges using any of its services, enabling remote code execution during startup or reboot with escalated privileges. Attackers can exploit the unquoted servic…
EPSS: 0.002 (14.3th percentile) — read the EPSS interpretation.
Affected products
- Flexsense Diskboss — versions 11.7.28
- Flexsense Diskboss Enterprise — versions 11.7.28
- Flexsense Diskboss Pro — versions 11.7.28
- Flexsense Diskboss Server — versions 11.7.28
- Flexsense Diskboss Ultimate — versions 11.7.28
Weakness classification (CWE)
References
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (third-party-advisory)