CVE-2020-12798

Cellebrite UFED 5.0 to 7.5.0.845 implements local operating system policies that can be circumvented to obtain a command prompt via the Windows file dialog that is reachable via the Certificate-Based Authentication option of the Wireless Network Connection screen.

• CWE-269

• http://packetstormsecurity.com/files/157715/Cellebrite-UFED-7.5.0.845-Desktop-Escape-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/thatguylevelThird Party Advisory
• https://korelogic.com/Resources/Advisories/KL-001-2020-002.txtExploit, Third Party Advisory
• https://korelogic.com/advisories.htmlThird Party Advisory
• https://twitter.com/thatguylevelThird Party Advisory
• http://packetstormsecurity.com/files/157715/Cellebrite-UFED-7.5.0.845-Desktop-Escape-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/thatguylevelThird Party Advisory
• https://korelogic.com/Resources/Advisories/KL-001-2020-002.txtExploit, Third Party Advisory
• https://korelogic.com/advisories.htmlThird Party Advisory
• https://twitter.com/thatguylevelThird Party Advisory

Published

May 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12787Microchip Atmel ATSAMA5 products in Secure Mode allow an att…7.5
• CVE-2020-12788CMAC verification functionality in Microchip Atmel ATSAMA5 p…7.5
• CVE-2020-12789The Secure Monitor in Microchip Atmel ATSAMA5 products use a…7.5
• CVE-2020-1279An elevation of privilege vulnerability exists when Windows …7.8
• CVE-2020-12790In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/…7.5
• CVE-2020-12797HashiCorp Consul and Consul Enterprise failed to enforce cha…5.3
• CVE-2020-1280An elevation of privilege vulnerability exists in the way th…7.8
• CVE-2020-12800The drag-and-drop-multiple-file-upload-contact-form-7 plugin…9.8
• CVE-2020-12801If LibreOffice has an encrypted document open and crashes, t…5.3
• CVE-2020-12802LibreOffice has a 'stealth mode' in which only documents fro…5.3
• CVE-2020-12803ODF documents can contain forms to be filled out by the user…6.5
• CVE-2020-1281A remote code execution vulnerability exists when Microsoft …8.8