{"id":"CVE-2020-24307","aliases":["EUVD-2020-17041","GHSA-wg3r-23qv-fhj6"],"status":"disputed","title":"An issue in mRemoteNG v1.76.20 allows attackers to escalate privileges via a crafted executable...","description":"An issue in mRemoteNG v1.76.20 allows attackers to escalate privileges via a crafted executable file. NOTE: third parties were unable to reproduce any scenario in which the claimed access of BUILTIN\\Users:(M) is present.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00368,"percentile":0.30901,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2023-02-02T00:00:00Z","modified":"2026-10-20T10:49:31Z","products":[{"vendor":"mremoteng","product":"mremoteng"}],"references":[{"url":"https://github.com/NyaMeeEain/Infrastructure-Assessment/blob/master/Privilege%20Escalation/Common%20Windows%20Privilege%20Escalation.md","tags":["x_transferred","Not Applicable","web"]},{"url":"https://packetstormsecurity.com/files/170794/mRemoteNG-1.76.20-Privilege-Escalation.html","tags":["x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://github.com/mRemoteNG/mRemoteNG/issues/2338","tags":["x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24307"},{"url":"https://github.com/advisories/GHSA-wg3r-23qv-fhj6"}],"sources":{"cve":[{"id":"CVE-2020-24307","description":"An issue in mRemoteNG v1.76.20 allows attackers to escalate privileges via a crafted executable file. NOTE: third parties were unable to reproduce any scenario in which the claimed access of BUILTIN\\Users:(M) is present.","status":"disputed","published":"2023-02-02T00:00:00Z","modified":"2024-08-04T15:12:08.287Z","updated_at":"2026-11-02T14:35:54.468882Z"}],"euvd":[{"id":"EUVD-2020-17041","description":"An issue in mRemoteNG v1.76.20 allows attackers to escalate privileges via a crafted executable file. NOTE: third parties were unable to reproduce any scenario in which the claimed access of BUILTIN\\Users:(M) is present.","status":"published","published":"2023-02-02T00:00:00Z","modified":"2024-08-04T15:12:08Z","updated_at":"2026-11-03T03:07:20.249898Z"}],"ghsa":[{"id":"GHSA-wg3r-23qv-fhj6","title":"An issue in mRemoteNG v1.76.20 allows attackers to escalate privileges via a crafted executable...","description":"An issue in mRemoteNG v1.76.20 allows attackers to escalate privileges via a crafted executable file.","status":"published","published":"2023-02-02T12:30:26Z","modified":"2023-02-17T15:30:26Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:54:10.14247Z"}],"nvd":[{"id":"CVE-2020-24307","description":"An issue in mRemoteNG v1.76.20 allows attackers to escalate privileges via a crafted executable file. NOTE: third parties were unable to reproduce any scenario in which the claimed access of BUILTIN\\Users:(M) is present.","status":"disputed","published":"2023-02-02T12:15:08.893Z","modified":"2026-06-17T03:05:22.033Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:06:47.286386Z"}],"osv":[{"id":"CVE-2020-24307","description":"An issue in mRemoteNG v1.76.20 allows attackers to escalate privileges via a crafted executable file. NOTE: third parties were unable to reproduce any scenario in which the claimed access of BUILTIN\\Users:(M) is present.","status":"published","published":"2023-02-02T12:15:08.893Z","modified":"2026-10-20T10:49:31.298361474Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.879068Z"}]}}