CVE-2020-13552CWE-276

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation

High · published February 17, 2021

CVSS v3.0
8.8
EPSS
1%
Percentile
42.2
In the wild
Unconfirmed
What it is

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via multiple service executables in installation folder of WebAccess, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00504 · 42.2th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2021-02-17T18:16Z
EPSS history
Timeline
  • 17 FEB 18:16Z
    An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation
    cvelistv5