CVE-2020-22722 - CVE House
Back to Database
Status published High CVE-2020-22722

Rapid Software LLC Rapid SCADA 5.8.0 is affected by a...

Vulnerability Description

Rapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in the ScadaAgentSvc.exe executable file. An attacker can obtain admin privileges by placing a malicious .exe file in the application and renaming it ScadaAgentSvc.exe, which would result in executing the binary as NT AUTHORITY\SYSTEM in a Windows operating system. For example, an attacker can plant a reverse shell from a low privileged user account and by restarting the computer, the malicious service will be started as NT AUTHORITY\SYSTEM by giving the attacker full system access to the remote PC.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-22722

Credits & Attribution

No credits recorded in the NVD database.

References

More from rapidscada

View All →
CVE-2022-44153
Rapid Software LLC Rapid SCADA 5.8.4 is vulnerable to Cross...
Unknown 0
CVE-2018-5313
A vulnerability allows local attackers to escalate privilege on Rapid...
High 7.8

Affected Vendor

Affected Software

rapid scada
Vulnerable Versions:
5.8.0

Timeline

Official Publish: August 14th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.