CVE-2021-40389: Incorrect Default Permissions

A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iEdge Server 1.0.2. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability...

PT-2022-3958

Name of the Vulnerable Software and Affected Versions Advantech DeviceOn/iEdge Server version 1.0.2 Description The issue is related to incorrect default permission settings, allowing an attacker to escalate privileges using a specially-crafted file. This can lead to an attacker gaining NT SYSTEM...