CVE-2020-11614

Mids' Reborn Hero Designer 2.6.0.7 downloads the update manifest, as well as update files, over cleartext HTTP. Additionally, the application does not perform file integrity validation for files after download. An attacker can perform a man-in-the-middle attack against this connection and replace executable files with malicious versions, which the operating system then executes under the context of the user running Hero Designer.

• CWE-319
• CWE-345

• https://github.com/Crytilis/mids-reborn-hero-designer/releasesRelease Notes, Third Party Advisory
• https://www.doyler.net/security-not-included/mids-reborn-vulnerabilitiesExploit, Third Party Advisory
• https://github.com/Crytilis/mids-reborn-hero-designer/releasesRelease Notes, Third Party Advisory
• https://www.doyler.net/security-not-included/mids-reborn-vulnerabilitiesExploit, Third Party Advisory

Published

Jun 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11609An issue was discovered in the stv06xx subsystem in the Linu…4.3
• CVE-2020-1161A denial of service vulnerability exists when ASP.NET Core i…7.5
• CVE-2020-11610An issue was discovered in xdLocalStorage through 2.0.5. The…8.8
• CVE-2020-11611An issue was discovered in xdLocalStorage through 2.0.5. The…6.1
• CVE-2020-11612The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbo…7.5
• CVE-2020-11613Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privi…7.8
• CVE-2020-11615NVIDIA DGX servers, all BMC firmware versions prior to 3.38.…7.5
• CVE-2020-11616NVIDIA DGX servers, all BMC firmware versions prior to 3.38.…7.5
• CVE-2020-11617The RSS application on THOMSON THT741FTA 2.2.1 and Philips D…5.9
• CVE-2020-11618THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1…7.8
• CVE-2020-11619FasterXML jackson-databind 2.x before 2.9.10.4 mishandles th…8.1
• CVE-2020-1162An elevation of privilege (user to user) vulnerability exist…7.8