CVE-2020-5740

Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute arbitrary Python code with SYSTEM privileges.

Score

CVSS 3.1 7.8 High

Status

Modified - vulnreport@tenable.com

Published

2020-04-22

Last modified

2024-08-04

Weaknesses

CWE-427

Affected products

• Media Server (Plex)

References

• https://www.tenable.com/security/research/tra-2020-25