Description (CNA)
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via PostgreSQL executable, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Advantech | affected Advantech WebAccess/SCADA 9.0.1 |
CWE
CWE-276
References
ADP enrichment
No English description supplied.