CVE-2020-24574: gog galaxy Use of Hard-coded Credentials
Vulnerability summary
CVE-2020-24574 is a high (CVSS 7.8) Use of Hard-coded Credentials vulnerability in gog galaxy. EPSS estimates a 0.62% chance of exploitation in the next 30 days, higher than 49.1% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 21-08-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local privilege escalation from any authenticated user to SYSTEM by instructing the Windows service to execute arbitrary commands. This occurs because the attacker can inject a DLL into GalaxyClient.exe, defeating the TCP-based "trusted client" protection mechanism.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.62%
Chance of exploitation in the next 30 days
Percentile
49%
Versus all other CVEs
30-day change
0.00 pp
From 0.62% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundGog Galaxy Client Service Poc
Maturity: poc
Exploit Reference (positronsecurity.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Gog1 product
- galaxy≥ 2.0.13, ≤ 2.0.41
1 vendor · 1 product
References
4 links- www.positronsecurity.com/blog/2020-08-13-gog-galaxy_client-local-privilege-escalation_deuce/X Refsource MISCExploitThird Party Advisory
- github.com/jtesta/gog_galaxy_client_service_poc/issues/1X Refsource MISCIssue TrackingThird Party Advisory