CVE-2020-15261 describes an unquoted service path vulnerability in the Veyon Service on Windows, affecting versions prior to 4.4.2. This flaw allows local authenticated users with administrative privileges to execute arbitrary code with LocalSystem privileges. While rated Medium severity (CVSS 6.7), its high impact on confidentiality, integrity, and availability is contingent on an attacker already possessing administrative access. Although not observed in active exploitation, public exploit code exists (EDB-49925), yet it has garnered minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 4.4.2CPE matchmatch criteria | cpe:2.3:a:veyon:veyon:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.