CVE-2020-12510

CVE-2020-12510 describes a privilege escalation vulnerability in Beckhoff TwinCAT XAR 3.1, affecting all versions. The default installation path creates directories with overly permissive write access for local users, allowing a less privileged user to replace the TcSysUI.exe executable, which is configured for automatic execution upon user login. This vulnerability has a CVSS score of 7.3 (High), indicating that a local, low-privileged attacker can trick a higher-privileged user into executing arbitrary code, leading to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.