CVE-2015-7913

EUVD-2015-7811
ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code with SYSTEM privileges by using the Apache Axis AdminService deployment method to publish a class.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 13%
Affected Products (NVD)
VendorProductVersion
tibboaggregate
𝑥
≤ 5.21.02
𝑥
= Vulnerable software versions
References
http://zerodayinitiative.com/advisories/ZDI-15-572/
https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01
http://zerodayinitiative.com/advisories/ZDI-15-572/
https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01