Security Advisory

CVE-2020-13551

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-02-17 18:17:14
Last updated 2024-08-04 12:25:15
Assigner talos
State PUBLISHED

Description

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via PostgreSQL executable, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege.