CVE-2020-13554CWE-276

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation

High · published March 3, 2021

CVSS v3.0
8.8
EPSS
1%
Percentile
45.1
In the wild
Unconfirmed
What it is

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In webvrpcs Run Key Privilege Escalation in installation folder of WebAccess, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00547 · 45.1th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2021-03-03T16:14Z
EPSS history
Timeline
  • 03 MAR 16:14Z
    An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation
    cvelistv5