CVE-2020-8150 – Remote Code Execution as SYSTEM/root via Backblaze

Posted by Jason Geffner on Sep 11

CVE-2020-8150 – Remote Code Execution as SYSTEM/root via Backblaze
——————————————————————

Summary
=======
Name: Remote Code Execution as SYSTEM/root via Backblaze
CVE: CVE-2020-8150
Discoverer: Jason Geffner
Vendor: Backblaze
Product: Backblaze for Windows and Backblaze for macOS
Risk: Critical
Discovery Date: 2020-03-13
Publication Data: 2020-09-08
Fixed Version: 7.0.1.433 (Windows) and 7.1.0.434…