CVE-2020-27708 json
A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or S…
published 2020-10-30 6 y ago modified 2026-06-17 4 mo ago also EUVD-2020-20212
- cvss
- 7.8
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.6%
- EPSS 0.6% chance of exploitation in 30 days, percentile 48%
- public exploits
- 0
- none known
Summary
A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or System. Once the user has obtained elevated access, they may be able to take control of the system and perform actions otherwise reserved for high privileged users or system Administrators.
Exploit prediction
0.59% chance of exploitation in the next 30 days, higher than 48% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- ea.com https://www.ea.com/security/news/easec-2020-002-elevation-of-privilege-vulnerability-in-origin-client referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- n/a Origin
Classification
- Weakness
-
- CWE-427 Uncontrolled Search Path Element
References
-
ea.com
/security/news/easec-2020-002-elevation-of-privilege-vulnerability-in-origin-client
exploit, vendor-advisory
Sources
- CVE List CVE-2020-27708
- NVD CVE-2020-27708
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.