1. Home
  2. CVE Database
  3. CVE-2020-6013
HIGH · 8.8

CVE-2020-6013

ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a combination of file perm...

Vulnerability Description

ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a combination of file permission manipulation and exploitation of Windows CVE-2020-00896 on unpatched systems.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CheckpointZonealarm Extreme Security< 15.8.109.18436

Related Weaknesses (CWE)

CWE-65CWE-269

References

FAQ

What is CVE-2020-6013?

CVE-2020-6013 is a vulnerability with a CVSS score of 8.8 (HIGH). ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a combination of file perm...

How severe is CVE-2020-6013?

CVE-2020-6013 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-6013?

Check the references section above for vendor advisories and patch information. Affected products include: Checkpoint Zonealarm Extreme Security.