Vulnerabilities

CVE-2020-36154

January 12, 2021

The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the “%SYSTEMDRIVE%\Pearson VUE” directory, which allows local users to obtain administrative privileges via a Trojan horse application.

Summary:

Reference Links(if available):

https://www.exploit-db.com/exploits/49143

https://github.com/passtheticket/vulnerability-research/blob/main/privilege-escalation/pearsonvue-readme.md

CVSS Score (if available)

v2: / HIGH

v3: /

Links to Exploits(if available)

Tags: CVE, CVE-2020-36154, exploit, MISC, vulnerability

CVE-2020-36154

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

Sliver C2 Detected – 23[.]236[.]66[.]200:31337

Sliver C2 Detected – 163[.]172[.]188[.]230:31337

GoPhish Login Page Detected – 146[.]190[.]252[.]26:443

GoPhish Login Page Detected – 34[.]239[.]43[.]150:443

GoPhish Login Page Detected – 185[.]97[.]116[.]241:8085

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

Sliver C2 Detected – 23[.]236[.]66[.]200:31337

Sliver C2 Detected – 163[.]172[.]188[.]230:31337

GoPhish Login Page Detected – 146[.]190[.]252[.]26:443

GoPhish Login Page Detected – 34[.]239[.]43[.]150:443

GoPhish Login Page Detected – 185[.]97[.]116[.]241:8085