CVE-2020-17381

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-10-21 · updated 2026-06-17
Weakness: CWE-276

Description

An issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the %SYSTEMDRIVE%\totalcmd\TOTALCMD64.EXE binary.

Affected products

Ghisler Total Commander: 9.51

References

https://github.com/OffensiveOceloot/advisories/blob/main/CVE-2020-17381.md
https://github.com/an0ry/advisories/blob/main/CVE-2020-17381.md
https://github.com/OffensiveOceloot/advisories/blob/main/CVE-2020-17381.md
https://github.com/an0ry/advisories/blob/main/CVE-2020-17381.md

Get alerted when CVE-2020-17381 or the next vulnerability affects your stack