CVE-2020-16202

WebAccess Node All versions prior to 9.0.1 has incorrect permissions set for resources used by specific services, which may allow code execution with system privileges...

CVE-2020-16202

Advantech WebAccess Node is affected: all versions prior to 9.0.1 have incorrect permissions for resources used by specific services, potentially enabling code execution with system privileges (CWE-732). Affected product: WebAccess Node (HMI platform). Root cause: incorrect resource permissions. ...

Advantech WebAccess Node

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Advantech Equipment: WebAccess Node Vulnerability: Incorrect Permission Assignment for Critical Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate their...