CVE-2020-13551CWE-276

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation

High · published February 17, 2021

CVSS v3.0
8.8
EPSS
0%
Percentile
41.5
In the wild
Unconfirmed
What it is

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via PostgreSQL executable, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00493 · 41.5th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2021-02-17T18:17Z
EPSS history
Timeline
  • 17 FEB 18:17Z
    An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation
    cvelistv5