VulnerabilityModified

CVE-2020-27708

A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or System.

HIGH 7.8EPSS 0.59%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.59%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or System. Once the user has obtained elevated access, they may be able to take control of the system and perform actions otherwise reserved for high privileged users or system Administrators.

CVSS 3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.59% probability · 46th percentile
CISA KEV: Not listed
Weakness: CWE-427
Affected: ea/origin
Source: secure@ea.com

References

https://www.ea.com/security/news/easec-2020-002-elevation-of-privilege-vulnerability-in-origin-clientExploit, Vendor Advisory
https://www.ea.com/security/news/easec-2020-002-elevation-of-privilege-vulnerability-in-origin-clientExploit, Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.