CVE-2020-13149 - CVE House
Back to Database
Status published High CVE-2020-13149

Weak permissions on the "%PROGRAMDATA%\MSI\Dragon Center" folder in Dragon Center...

Vulnerability Description

Weak permissions on the "%PROGRAMDATA%\MSI\Dragon Center" folder in Dragon Center before 2.6.2003.2401, shipped with Micro-Star MSI Gaming laptops, allows local authenticated users to overwrite system files and gain escalated privileges. One attack method is to change the Recommended App binary within App.json. Another attack method is to use this part of %PROGRAMDATA% for mounting an RPC Control directory.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-13149

Credits & Attribution

No credits recorded in the NVD database.

References

More from msi

View All →
CVE-2022-38532
Micro-Star International Co., Ltd MSI Center 1.0.50.0 was discovered to...
High 7.8
CVE-2022-34110
An issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows...
Medium 5.5
CVE-2022-34109
An issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows...
High 7.1
CVE-2022-34108
An issue in the Feature Navigator of Micro-Star International MSI...
High 7.1
CVE-2022-31877
An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0...
Unknown 0

Affected Vendor

Affected Software

dragon center
Vulnerable Versions:
0

Timeline

Official Publish: May 18th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.