CVE-2020-5741 Plex Media Server Remote Code Execution Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply updates per vendor instructions.

Ransomware campaigns Not observed so far

Weakness CWE-502

Description

Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code.

Affected products and versions

Product	Affected versions	Fixed in
Plex Media Server (Windows)	Versions not published

Other CVEs of Plex Media Server (Windows)

The 2 CVEs of Plex Media Server (Windows) →

CVE-2020-5740 Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute… Not rated