Skip to content
OpenAdvisories
High · 8.8 CVE-2020-13551 EUVD-2020-5798GHSA-88ww-3mg9-3w7j

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installatio…

Published Feb 17, 2021 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via PostgreSQL executable, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege.

Affected products

VendorProductAffectedFixed
— Advantech Advantech WebAccess/SCADA 9.0.1 —

References