CVE-2020-13536: Critical severity moxa mxview one vulnerability

Published Nov 5, 2020

Updated

An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code to a script or replace a binary. By default MXViewService, which starts as a NT SYSTEM authority user executes a series of Node.Js scripts to start additional application functionality.

Affected Software

1 affected component

MOXA MXView=3.1.8

Event History

Nov 5, 2020

CVE Published

via MITRE·08:09 PM

Data Sourced

via MITRE·08:09 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2020-13536.

What is the severity of CVE-2020-13536?

The severity of CVE-2020-13536 is critical with a CVSS score of 7.8.

What is the affected software of CVE-2020-13536?

The affected software is Moxa MXView series 3.1.8.

How can an attacker exploit CVE-2020-13536?

An attacker can exploit CVE-2020-13536 by adding code to a script or replacing a binary.

Is there a fix available for CVE-2020-13536?

At the moment, there is no information available regarding a fix for CVE-2020-13536. It is recommended to follow the vendor's advisories for any updates.