Unscored severity · published Oct 3, 2013
CVE-2013-5701
Multiple untrusted search path vulnerabilities in (1) Watchguard Log Collector (wlcollector.exe) and (2) Watchguard WebBlocker Server (wbserver.exe) in WatchGuard Server Center…
–
CVSS
1%
EPSS
No
On KEV
Description
Multiple untrusted search path vulnerabilities in (1) Watchguard Log Collector (wlcollector.exe) and (2) Watchguard WebBlocker Server (wbserver.exe) in WatchGuard Server Center 11.7.4, 11.7.3, and possibly earlier allow local users to gain privileges via a Trojan horse wgpr.dll file in the application's bin directory.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Server Center · Watchguard
through 11.7.4; 11.7.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5701
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5701
Exploit
http://seclists.org/fulldisclosure/2013/Sep/43
Exploit
http://www.securitytracker.com/id/1028992
Exploit
https://www.rcesecurity.com/2013/09/cve-2013-5701-watchguard-server-center-v11-7-4-wgpr-dll-local-privileges-escalation-vulnerability