{"vulnerability": "CVE-2020-5752", "sightings": [{"uuid": "76edfcc9-49d3-4720-bdb9-f8e0044894e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5752", "type": "exploited", "source": "https://www.exploit-db.com/exploits/48505", "content": "", "creation_timestamp": "2020-05-22T00:00:00.000000Z"}, {"uuid": "d33facfe-97e8-472d-87f1-b1585e758e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5752", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "74a90b22-4aad-4248-9a90-cfca754bae82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5752", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:29.000000Z"}, {"uuid": "20626e69-2e04-4be6-8664-521049a23c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5752", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/druva_insync_insynccphwnet64_rcp_type_5_priv_esc.rb", "content": "", "creation_timestamp": "2020-05-12T18:48:12.000000Z"}, {"uuid": "dfbc6fe8-b2b0-4bdf-8fc5-fe4e36c76d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5752", "type": "published-proof-of-concept", "source": "Telegram/jbT4DyaXAQWEEBg3Kh-8FLm9_wvzpJ1MV36Ko8B3bIBgXlo", "content": "", "creation_timestamp": "2026-01-13T15:00:06.000000Z"}, {"uuid": "026e1b5a-ec1d-4d9c-8f6c-6e3989bdb4ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5752", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/druva_insync_insynccphwnet64_rcp_type_5_priv_esc.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Chris Lyne\", \"Matteo Malvica\", \"bcoles \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"Druva inSync client for Windows exposes a network service on TCP\\n            port 6064 on the local network interface. inSync versions 6.6.3\\n            and prior do not properly validate user-supplied program paths\\n            in RPC type 5 messages, allowing execution of arbitrary commands\\n            as SYSTEM.\\n\\n            This module has been tested successfully on inSync versions\\n            6.5.2r99097 and 6.6.3r102156 on Windows 7 SP1 (x64).\", \"disclosure_date\": \"2020-02-25\", \"fullname\": \"exploit/windows/local/druva_insync_insynccphwnet64_rcp_type_5_priv_esc\", \"is_install_path\": true, \"mod_time\": \"2023-02-10 18:04:31 +0000\", \"name\": \"Druva inSync inSyncCPHwnet64.exe RPC Type 5 Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/local/druva_insync_insynccphwnet64_rcp_type_5_priv_esc.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/local/druva_insync_insynccphwnet64_rcp_type_5_priv_esc\", \"references\": [\"CVE-2019-3999\", \"CVE-2020-5752\", \"EDB-48400\", \"EDB-48505\", \"EDB-49211\", \"PACKETSTORM-157493\", \"PACKETSTORM-157802\", \"PACKETSTORM-160404\", \"URL-https://www.tenable.com/security/research/tra-2020-12\", \"URL-https://www.tenable.com/security/research/tra-2020-34\", \"URL-https://github.com/tenable/poc/blob/master/druva/inSync/druva_win_cphwnet64.py\", \"URL-https://www.matteomalvica.com/blog/2020/05/21/lpe-path-traversal/\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:09.744881Z"}]}