CVE-2020-15264

CVE-2020-15264 describes a local privilege escalation vulnerability in Boxstarter installer versions prior to 3.13.0. It arises because the installer adds a user-writable directory (C:\ProgramData\Boxstarter) to the system-wide PATH environment variable. An unprivileged attacker can place a malicious DLL in this directory, which a privileged service will then execute with SYSTEM privileges upon system startup. This vulnerability has a CVSS score of 7.8 (High), indicating a low attack complexity and requiring local access, but allowing for high impact on confidentiality, integrity, and availability. The EPSS score is low, suggesting a low probability of exploitation in the wild. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. The vulnerability is fixed in Boxstarter version 3.13.0.