An issue was discovered in Ghisler Total Commander 9.51. Due...

7.3 CVSS

Vulnerability Description

An issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the %SYSTEMDRIVE%\totalcmd\TOTALCMD64.EXE binary.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-17381

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from ghisler

View All →

CVE-2015-2869

The FileInfo plugin before 2.22 for Ghisler Total Commander allows...

Medium 5

CVE-2007-4756

Directory traversal vulnerability in the FTP client in Total Commander...

Medium 6.8

Affected Vendor

ghisler

View all reports →

Affected Software

total commander

Vulnerable Versions:

9.51

Timeline

Official Publish: October 21st, 2020

Last Modified: August 4th, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.