What is CVE-2018-5313?

CVE-2018-5313 is a high-severity vulnerability in Rapidscada Rapid Scada, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.8/10. Published 2018-03-08.

How severe is CVE-2018-5313?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2018-5313 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Rapidscada Rapid Scada

CVE-2018-5313

A vulnerability allows local attackers to escalate privilege on Rapid Scada 5.5.0 because of weak C:\SCADA permissions. The specific flaw exists within the access control that is set and modified during the installation of the product. The product sets weak access control restrictions. An attacker can leverage this vulnerability to execute arbitrary code under the context of Administrator, the IUSR account, or SYSTEM.

EPSS: 0.006 (44.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Rapidscada Rapid_scada — versions 5.5.0
N/a — versions n/a

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

Public proof-of-concept exploits

ARPSyndicate/cvemon

References

cve@mitre.org (mailing-list, x_refsource_FULLDISC, Mailing List, Third Party Advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-5313?: CVE-2018-5313 is a high-severity vulnerability in Rapidscada Rapid Scada, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.8/10. Published 2018-03-08.
How severe is CVE-2018-5313?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2018-5313 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.