Lucene search

K
zdiMat Powell of Trend Micro Zero Day InitiativeZDI-20-655
HistoryMay 14, 2020 - 12:00 a.m.

(0Day) Advantech WebAccess Node Incorrect Permission Assignment Privilege Escalation Vulnerability

2020-05-1400:00:00
Mat Powell of Trend Micro Zero Day Initiative
www.zerodayinitiative.com
5

0.142 Low

EPSS

Percentile

95.7%

This vulnerability allows local attackers to escalate privileges on affected installations of Advantech WebAccess Node. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of the PostgreSQL database. The issue results from incorrect permissions set on a resource used by the service. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM.

0.142 Low

EPSS

Percentile

95.7%

Related for ZDI-20-655