7.8high
CVE-2016-20060
Hotspot Shield 6.0.3 Unquoted Service Path Privilege Escalation
Published 7 mo ago · modified 3 mo ago · JSON
CVSS
7.8
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 5%
Public exploits
0
none known
Summary
Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malicious executables. Attackers can place executable files in the service path and upon service restart or system reboot, the malicious code executes with LocalSystem privileges.
CISA SSVC assessment
- Exploitation
- Proof of concept public
- Automatable
- no
- Technical impact
- total
- Assessed
- 7 mo ago
Exploit prediction (EPSS)
0.15% probability of exploitation in the next 30 days, higher than 5% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 4.0 | 8.5 | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| CNA | 4.0 | 8.5 | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Hotspotshield Hotspot Shield
Classification
- Weakness
- CWE-428 Unquoted Search Path or Element
References
- exploit-db.com /exploits/40528 · exploit
- hotspotshield.com · product
- hotspotshield.com /download/ · product
- vulncheck.com /advisories/hotspot-shield-unquoted-service-path-privilege-escalation · third-party-advisory
Sources
- CVE List: CVE-2016-20060
- NVD: CVE-2016-20060
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.