High severity · published May 7, 2020
CVE-2020-12608
An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent
7.8
CVSS
22.4%
EPSS
No
On KEV
Description
An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\. This can lead to code execution by changing the CacheService.xml SISServerURL parameter.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)22.4% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MS
Managed Service Provider Patch Management Engine · Solarwinds
before 1.1.15 · source: NVD
Affected product
MS
Managed Service Provider Patch Management Engine
Solarwinds
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-12608
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-12608
Exploit
http://packetstormsecurity.com/files/157591/SolarWinds-MSP-PME-Cache-Service-Insecure-File-Permissions-Code-Execution.html
Exploit
http://seclists.org/fulldisclosure/2020/May/23
Exploit
https://github.com/jensregel/Advisories/tree/master/CVE-2020-12608