CVE-2020-13554 in WebAccess
Summary
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In webvrpcs Run Key Privilege Escalation in installation folder of WebAccess, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
05/26/2020
Disclosure
03/04/2021
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 170611 | Advantech WebAccess/SCADA access control | 284 | Not defined | Not defined | CVE-2020-13554 |