CVE-2020-13535CWE-276

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0

Critical · published December 18, 2020

CVSS v3.0
9.3
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYSTEM privileges.

The record
Technical detail
CVSS v3.0
9.3 · CRITICAL
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00688 · 52.2th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2020-12-18T20:39Z
EPSS history
Timeline
  • 18 DEC 20:39Z
    A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0
    cvelistv5