Cyber Posture

CVE-2020-23438

HighPublic PoC

Published: 04 March 2025

Published
04 March 2025
Modified
26 March 2025
KEV Added
—
Patch
—
CVSS Score 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0007 21.9th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.

Security Summary

CVE-2020-23438 is a Trojan DLL hijacking vulnerability affecting Wondershare Filmora version 9.2.11, enabling privilege escalation. Mapped to CWE-427 (Untrusted Search Path), it carries a CVSS v3.1 base score of 7.8, with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high impacts on confidentiality, integrity, and availability from local exploitation.

A local attacker possessing low privileges can exploit this issue with low attack complexity and no user interaction. By leveraging the DLL hijacking mechanism, the attacker can elevate privileges, potentially gaining full system control from an initial low-privilege position.

Mitigation details are available in the referenced advisory at https://cvewalkthrough.com/cve-2020-23438-wondershare-filmora-9-2-11-trojan-dll-hijacking-leading-to-privilege-escalation/. The CVE was published on 2025-03-04T21:15:10.907.

Details

CWE(s)
CWE-427

Affected Products

wondershare
filmora
≤ 9.2.11

MITRE ATT&CK Enterprise Techniques

T1574.001 DLL Stealth
Adversaries may abuse dynamic-link library files (DLLs) in order to achieve persistence, escalate privileges, and evade defenses.
attack.mitre.org →
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
attack.mitre.org →
Why these techniques?

CVE describes DLL hijacking via untrusted search path (CWE-427) enabling local privilege escalation to full system control.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

References