Privilege Escalation via Home DNS Server 0.10 Default Installation Directory

Privilege Escalation via Home DNS Server 0.10 Default Installation Directory

CVE-2020-26132 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

An issue was discovered in Home DNS Server 0.10. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the HomeDNSServer.exe binary.

Learn more about our Cis Benchmark Audit For Server Software.