CVE-2020-13549 - CVE House
Back to Database
Status published High CVE-2020-13549

An exploitable local privilege elevation vulnerability exists in the file...

Vulnerability Description

An exploitable local privilege elevation vulnerability exists in the file system permissions of Sytech XL Reporter v14.0.1 install directory. Depending on the vector chosen, an attacker can overwrite service executables and execute arbitrary code with privileges of user set to run the service or replace other files within the installation folder, which would allow for local privilege escalation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-13549

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Sytech
Vulnerable Versions:
Sytech XL Reporter v14.0.1

Timeline

Official Publish: February 19th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)