by Kastro
Paper/Archive/CVE-2020-13535

CVE-2020-13535

talos — A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0.

EPSS 0.7%CVSS 9.3
critical.is priorityof 100
39
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 52.8.528 × 2010.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. In its default configuration, an attacker can globally overwrite service configuration to execute arbitrary code with NT SYSTEM privileges.

Affected

ProductAffectedFixed inSource
KepwareKepware LinkMaster 3.0.94.0–CNA

Scores by source

talos (CNA)9.3CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

reftalosintelligence.com/vulnerability_reports/TALOS-2020-1147