CVE-2020-13551 – An exploitable local privilege elevation vulnerability exists in the file

An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via PostgreSQL executable, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13551

Reference (s):

• https://talosintelligence.com/vulnerability_reports/TALOS-2020-1169
• URL: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1169