PT-2020-13608 · Kepware · Kepware Linkmaster

Yuri Kramarz · Published 2020-12-18 · Updated 2022-08-06 · CVE-2020-13535

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kepware LinkMaster version 3.0.94.0

Description A privilege escalation issue exists, allowing an attacker to globally overwrite service configuration and execute arbitrary code with NT SYSTEM privileges in the default configuration.

Recommendations For Kepware LinkMaster version 3.0.94.0, update to a version that addresses this issue to prevent privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2020-13535

Affected Products

Kepware Linkmaster

References · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1147 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-13535 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13535 · Vendor Advisory
• https://t.me/cvenotify/7526 · Telegram Post