CVE-2020-13551

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via PostgreSQL executable, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege...

CVE-2020-13551

Advantech WebAccess/SCADA 9.0.1 is affected by CVE-2020-13551, a local privilege escalation via the PostgreSQL executable. The vulnerability arises from weak file system permissions that allow an authenticated user to replace binaries or loaded DLLs in the installation directory (e.g., pg_ctl.exe...

CVE-2020-13552

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via multiple service executables in installation folder of WebAccess, an attacker can either replace binary or loaded modules to...

CVE-2020-13552

CVE-2020-13552 affects Advantech WebAccess/SCADA 9.0.1. TALOS details multiple local privilege escalation vectors: attackers can replace binaries or loaded modules in the installation folder or manipulate service executables to run code with NT SYSTEM privileges. The issue involves weak permissio...

PT-2021-9630

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA version 9.0.1 Description A local privilege elevation issue exists in the file system permissions of the installation, allowing an attacker to escalate privileges via multiple service executables in the installation...

PT-2021-9629

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA version 9.0.1 Description A local privilege elevation issue exists in the file system permissions of the installation, allowing an attacker to escalate privileges via the PostgreSQL executable. This can be achieved by...

PT-2021-9632

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA version 9.0.1 Description A local privilege elevation issue exists in the file system permissions of the installation, allowing an attacker to replace binary or loaded modules and execute code with NT SYSTEM privilege...

CVE-2020-13551: Incorrect Default Permissions

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via PostgreSQL executable, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege...

CVE-2020-13552: Incorrect Default Permissions

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via multiple service executables in installation folder of WebAccess, an attacker can either replace binary or loaded modules to...

CVE-2020-13555: Incorrect Default Permissions

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In COM Server Application Privilege Escalation, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege...

PT-2021-9631

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA version 9.0.1 Description A local privilege elevation issue exists in the file system permissions of the installation, allowing an attacker to execute code with NT SYSTEM privilege by replacing binary or loaded module...

CVE-2020-13553: Incorrect Default Permissions

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In webvrpcs Run Key Privilege Escalation in installation folder of WebAccess, an attacker can either replace binary or loaded modules to execute code with ...

Advantech WebAccess/SCADA security vulnerabilities

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A local elevation of privilege...

Advantech WebAccess/SCADA security vulnerabilities

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A local elevation of privilege...

CVE-2020-13535

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYSTEM privileges...

Privilege escalation

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYSTEM privileges...

CVE-2020-13535

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYSTEM privileges...

CVE-2020-13535

Kepware LinkMaster 3.0.94.0 has a privilege-escalation flaw (CVE-2020-13535) due to Incorrect Default Permissions (CWE-276). The service allows Everyone/SYSTEM-level access to change SERVICE_CONFIG, enabling a local attacker to re-point the LinkMaster service to an arbitrary executable and run wi...

PT-2020-13608 · Kepware · Kepware Linkmaster

Name of the Vulnerable Software and Affected Versions: Kepware LinkMaster version 3.0.94.0 Description: A privilege escalation issue exists, allowing an attacker to globally overwrite service configuration and execute arbitrary code with NT SYSTEM privileges in the default configuration...

CVE-2020-13535: Incorrect Default Permissions

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYSTEM privileges...