The vulnerability of the Advantech DeviceOn/iService software lies in improper default access rights settings, which allow attackers to escalate their privileges.

The vulnerability of the Advantech DeviceOn/iService software is related to incorrect default access rights settings. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created file...

CVE-2021-40396

A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1.1.7. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-40396

A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1.1.7. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability...

Privilege escalation

A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1.1.7. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-40396

A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1.1.7. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-40396

Advantech DeviceOn/iService 1.1.7 is affected by a privilege-escalation flaw from overly-permissive installation directory permissions. According to TALOS-2021-1408, the Server binaries in c:\Program Files\Advantech\WISE-DeviceOn\database\PostgreSQL\pgsql\bin\ (psql.exe, pg_ctl.exe, postgres.exe)...

CVE-2021-40396: Incorrect Default Permissions

A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1.1.7. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability...

Advantech has unspecified vulnerabilities (CNVD-2022-08289)

Advantech is an application of Advantech, a Chinese company that provides an intelligent electric bus management system. Advantech DeviceOn/iService 1.1.7 contains a security vulnerability that can be exploited by attackers to replace specially crafted files in the system to elevate privileges to...

Advantech 安全漏洞

Advantech is an application of Advantech, a Chinese company that provides an intelligent electric bus management system. Advantech DeviceOn/iService 1.1.7 contains a security vulnerability that can be exploited by attackers to replace specially crafted files in the system to elevate privileges to...

PT-2022-3959

Name of the Vulnerable Software and Affected Versions Advantech DeviceOn/iService version 1.1.7 Description A privilege escalation issue exists due to incorrect default permission settings, allowing an attacker to elevate privileges using a specially-crafted file. This can be triggered by replaci...

Advantech DeviceOn/iService 1.1.7 Server installation privilege escalation vulnerability

Summary A privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1.1.7. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability. Tested Versio...