CVE-2020-10940

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Mar 27, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-109415.9Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by measuring cache usage during an import.CVE-2020-109425.3In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers CVE-2020-109445.4HashiCorp Nomad and Nomad Enterprise up to 0.10.4 contained a cross-site scripting vulnerability such that files from a malicious workload cCVE-2020-109454.3Centreon before 19.10.7 exposes Session IDs in server responses.CVE-2020-109466.1Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-moCVE-2020-109478.8Mac Endpoint for Sophos Central before 9.9.6 and Mac Endpoint for Sophos Home before 2.2.6 allow Privilege Escalation.CVE-2020-109489.8Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) 2.0.2 is vulnerable to Remote Command Execution via eval injection, aCVE-2020-109514.7Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages.CVE-2020-109526.5GitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push docker images.CVE-2020-109537.5In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue.CVE-2020-109547.5GitLab through 12.9 is affected by a potential DoS in repository archive download.CVE-2020-109556.5GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content av
CVE-2020-10940: High severity, CVSS 7.8 | Vulnix