8.8
High
CVE-2020-13552 An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech…
Description
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via multiple service executables in installation folder of WebAccess, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Advantech | Versions not published |
References
- talosintelligence.com talosintelligence.com
Timeline
- Published
- Last modified
Other CVEs of Advantech
The 39 CVEs of Advantech →
CVE-2021-21937
A specially-crafted HTTP request can lead to SQL injection
7.7
High
CVE-2021-21936
A specially-crafted HTTP request can lead to SQL injection
7.7
High
CVE-2021-21935
A specially-crafted HTTP request can lead to SQL injection
7.7
High
CVE-2021-21934
A specially-crafted HTTP request can lead to SQL injection
7.7
High