CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2020-26155
High (7.8) in utimaco. EPSS 0.4% chance of exploitation in the next 30 days.
Multiple files and folders in Utimaco SecurityServer 4.20.0.4 and 4.31.1.0. are installed with Read/Write permissions for authenticated users, which allows for binaries to be manipulated by non-administrator users. Additionally, entries are made to the PATH environment variable which, in conjunction with these weak permissions, could enable an attacker to perform a DLL hijacking attack.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-427, CWE-732
- Published
- Modified
- Record from
- the NVD, synced
Affected
- utimaco:block-safe_firmware
- utimaco:cryptoserver_cp5_firmware
- utimaco:cryptoserver_cp5_vs-nfd_firmware
- utimaco:paymentserver_firmware
- utimaco:paymentserver_hybrid_firmware
- utimaco:securityserver_firmware