CVE-2020-13555 : What You Need to Know

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation, allowing an attacker to execute code with NT SYSTEM privilege.

Understanding CVE-2020-13555

This CVE involves a local privilege escalation vulnerability in Advantech WebAccess/SCADA 9.0.1.

What is CVE-2020-13555?

This CVE refers to a security flaw in Advantech WebAccess/SCADA 9.0.1 that enables attackers to elevate their privileges locally.

The Impact of CVE-2020-13555

The vulnerability has a CVSS base score of 8.8 (High severity) with high impacts on confidentiality, integrity, and availability. Attackers can exploit this to execute code with elevated privileges.

Technical Details of CVE-2020-13555

This section provides more technical insights into the vulnerability.

Vulnerability Description

The vulnerability arises from incorrect file system permissions in Advantech WebAccess/SCADA 9.0.1, allowing attackers to perform privilege escalation.

Affected Systems and Versions

Product: Advantech
Version: Advantech WebAccess/SCADA 9.0.1

Exploitation Mechanism

Attackers can replace binary or loaded modules to execute code with NT SYSTEM privilege, exploiting the COM Server Application Privilege Escalation.

Mitigation and Prevention

Protecting systems from CVE-2020-13555 requires immediate actions and long-term security practices.

Immediate Steps to Take

Apply vendor-supplied patches promptly to fix the vulnerability.
Restrict access to vulnerable systems to trusted users only.
Monitor system activity for any signs of exploitation.

Long-Term Security Practices

Regularly update and patch software to prevent known vulnerabilities.
Implement the principle of least privilege to limit user access rights.
Conduct security training for employees to raise awareness of potential threats.
Employ security tools like intrusion detection systems to monitor and detect suspicious activities.
Consider implementing network segmentation to contain potential attacks.

Patching and Updates

Ensure that all systems running Advantech WebAccess/SCADA 9.0.1 are updated with the latest patches provided by the vendor to mitigate the vulnerability.