CVE-2020-28046

An issue was discovered in ProlinOS through 2.4.161.8859R. An attacker with local code execution privileges as a normal user (MAINAPP) can escalate to root privileges by exploiting the setuid installation of the xtables-multi binary and leveraging the ip6tables --modprobe switch.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2020-11-02

Last modified

2024-08-04

Weaknesses

CWE-269

Affected products

• Prolinos (Pax)

References

• https://git.lsd.cat/g/pax-pwn