CVE-2020-13554

HIGH

Advantech WebAccess/SCADA 9.0.1 - Local Privilege Escalation via Insecure File Permissions

Title source: llm
STIX 2.1

Description

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In webvrpcs Run Key Privilege Escalation in installation folder of WebAccess, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege.

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1169

Scores

CVSS v3 7.8
EPSS 0.0004
EPSS Percentile 13.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-276
Status published
Products (1)
advantech/webaccess\/scada 9.0.1
Published Mar 03, 2021
Tracked Since Feb 18, 2026