Skip to content
OpenAdvisories
High · 8.8 CVE-2020-13555 EUVD-2020-5802GHSA-p5fj-p4px-rj6r

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installatio…

Published Feb 17, 2021 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In COM Server Application Privilege Escalation, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege.

Affected products

VendorProductAffectedFixed
— Advantech Advantech WebAccess/SCADA 9.0.1 —

References