4.6
CVSSv2

CVE-2020-9332

Published: 17/06/2020 Updated: 21/07/2021
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

ftusbbus2.sys in FabulaTech USB for Remote Desktop through 2020-02-19 allows privilege escalation via crafted IoCtl code related to a USB HID device.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

fabulatech usb for remote desktop

Github Repositories

CVE-2020-9332 Description A vulnerable bus driver in FabulaTech “USB for Remote Desktop” and “USB over Network” allows low privileged users to add a fully controlled software USB device, which could be used by an attacker to elevate privileges under certain common circumstances [Vulnerability Type] Incorrect Access Control [Vendor of Product] FabulaTec