CVE-2020-23834

7.8 highEPSS 0.5%

High (7.8) in realtimelogic barracudadrive. EPSS 0.5% chance of exploitation in the next 30 days.

Insecure Service File Permissions in the bd service in Real Time Logic BarracudaDrive v6.5 allow local attackers to escalate privileges to admin by replacing the %SYSTEMDRIVE%\bd\bd.exe file. When the computer next starts, the new bd.exe will be run as LocalSystem.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2020-09-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

realtimelogic:barracudadrive

References

https://github.com/boku7/BarracudaDrivev6.5-LocalPrivEsc
https://www.exploit-db.com/exploits/48789
https://github.com/boku7/BarracudaDrivev6.5-LocalPrivEsc
https://www.exploit-db.com/exploits/48789

Check your stack JSON