Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2020-13552

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via multiple s

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
talos

Description

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via multiple service executables in installation folder of WebAccess, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Advantech

  • Advantech WebAccess/SCADA 9.0.1affected

References