Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

CVE-2020-35686

Published

3 years ago

Last Modified

3 years ago

CVSSv2.0 Severity

Medium

CVSSv3.1 Severity

High

Impact Analysis

The SECOMN service in Sound Research DCHU model software component modules (APO) through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation of privilege via a fake DLL. (As a resolution, Windows Update is being submitted for all affected products to update to 2.0.9.18 or later.).

CVSSv2.0 Score

Severity: Medium
Base Score: 4.4/10
Exploit Score: 3.4/10
Access Vector: Local
Access Complexity: Medium
Authentication Required: None
Impact Score: 6.4/10
Confidentiality Impact: Partial
Availability Impact: Partial
Integrity Impact: Partial

CVSSv3.1 Score

Severity: High
Base Score: 7.8/10
Exploit Score: 1.8/10
Access Vector: Local
Access Complexity: Low
Privileges Required: None
Impact Score: 5.9/10
Confidentiality Impact: High
Availability Impact: High
Integrity Impact: High
Scope: Unchanged
User Interaction: Required

Products Affected

CPE	Affected	Vulnerable	Excluding	Edit
cpe:2.3:a:soundresearch:dchu_model_software_component_module	Yes	-	-

References

https://www.soundresearch.com/wp-content/uploads/static/CVE-2020-35686.html