{"uuid": "334a6262-2a2b-47bb-a2ae-70b7e1858b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-24307", "type": "seen", "source": "https://t.me/hacking_Attack/88121", "content": "Exploit Collector\nmRemoteNG 1.76.20 Privilege Escalation\n\nhttps://2.bp.blogspot.com/-466o0SY5wbQ/WWlvXOxbxYI/AAAAAAAAIOQ/eHwtwujRsQI9h-mxYQXglBmw7d5gufaKwCLcBGAs/s1600/h51.png \nmRemoteNG version 1.76.20 suffers from a weak permission privilege escalation vulnerability.\n\nSHA-256 | aa08068eda449c43f5c76d0ec56fca19930c2ac6719246bec693e3037f692da6\n\nDownload\nmRemoteNG mRemoteNG v1.76.20 Privilege Escalation\nDetailed Information\n------------------------------------------------------------------------------------------------------------------------------------------------------------------------\n\nProduct Name: mRemoteNG\nVendor Home Page:  https://mremoteng.org\nVulnerable Version: mRemoteNG v1.76.20\nFixed Version: mRemoteNG v1.76.20.24615\nVulnerability Type: Improper Access Control (CWE-284)\nCVE Reference: CVE-2020-24307\nAuthor of Advisory: Thurein Soe\n\n------------------------------------------------------------------------------------------------------------------------------------------------------------------------\nProduct Description:\n\nmRemoteNG is an open-source multi-protocol, remote connections manager for\nWindows that allows managing multiple diverse connections with remote\nsystems.\n------------------------------------------------------------------------------------------------------------------------------------------------------------------------\n\nVulnerability description:\n\nWindows service permissions is a type of local privilege escalation in the\nwindows operating system. Weak service permissions run with system user\npermission that allows a standard user to elevate to administrator\nprivilege on the compromised system upon successfully modifying the\nservice. mRemoteNG.exe was giving modify permission to any authenticated\nusers in the windows operating system that allows standard users to modify\nthe service resulting in leading Privilege Escalation.\n\nC:\\Users\\NyaMeeEain>icacls \"C:\\Program Files (x86)\\mRemoteNG\\mRemoteNG.exe\"\nC:\\Program Files (x86)\\mRemoteNG\\mRemoteNG.exe APPLICATION PACKAGE\nAUTHORITY\\ALL APPLICATION PACKAGES:(M)\nBUILTIN\\Users:(M)\nAPPLICATION PACKAGE AUTHORITY\\ALL APPLICATION PACKAGES:(I)(M)\nNT AUTHORITY\\SYSTEM:(I)(F)\nBUILTIN\\Administrators:(I)(F)\nBUILTIN\\Users:(I)(RX)\nAPPLICATION PACKAGE AUTHORITY\\ALL RESTRICTED APPLICATION PACKAGES:(I)(RX)\n------------------------------------------------------------------------------------------------------------------------------------------------------------------------\n\nReferences:\nhttps://www.immuniweb.com/vulnerability/improper-access-control.html\nhttps://www.cvedetails.com/cwe-details/284/Access-Control-Authorization-Issues.html\n------------------------------------------------------------------------------------------------------------------------------------------------------------------------\n\nCredits:\nThurein Soe\n------------------------------------------------------------------------------------------------------------------------------------------------------------------------\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:05.406333Z"}