CVE-2015-7913

ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code with SYSTEM privileges by using the Apache Axis AdminService deployment method to publish a class.

Score

CVSS 2.0 7.2 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-11-21

Last modified

2024-08-06

Affected products

• Aggregate (Tibbo)

References

• http://zerodayinitiative.com/advisories/ZDI-15-572/
• https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01