PT-2021-2348 · Advantech · Advantech Webaccess/Scada

Yuri Kramarz · Published 2021-02-16 · Updated 2022-09-30 · CVE-2020-13554

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA version 9.0.1

Description A local privilege elevation issue exists in the file system permissions of the installation, specifically in the webvrpcs Run Key Privilege Escalation. This allows an attacker to replace binary or loaded modules, executing code with NT SYSTEM privilege. The vulnerability is related to insecure privilege management in the webvrpcs component.

Recommendations For Advantech WebAccess/SCADA version 9.0.1, consider restricting access to the webvrpcs Run Key Privilege Escalation in the installation folder to minimize the risk of exploitation. As a temporary workaround, disabling the execution of code with NT SYSTEM privilege may help until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Incorrect Default Permissions

Weakness Enumeration

CWE-269

CWE-276

Related Identifiers

BDU:2021-01586

CVE-2020-13554

Affected Products

Advantech Webaccess/Scada

References · 6

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1169 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-13554 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13554 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01586 · Security Note
• https://t.me/cybersecuritytechnologies/2750 · Telegram Post
• https://t.me/cibsecurity/24401 · Telegram Post