VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 9, 2021· Updated Jun 17, 2026

CVE-2020-13532

CVE-2020-13532

Description

A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashboard Service service binary can be replaced by attackers to escalate privileges to NT SYSTEM. An attacker can provide a malicious file to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Dreamreport/Dream Report2 versions
    cpe:2.3:a:dreamreport:dream_report:5_r20-2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:dreamreport:dream_report:5_r20-2:*:*:*:*:*:*:*
    • (no CPE)range: 5 R20-2
  • Dream Report/Dream Reportdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.