Improper Access Control in Pallet Control Software from Jal Infotec
CVE-2020-5538

7.8HIGH

Key Information:

Vendor

Jal Information Technology Co., Ltd.

Status
Pallet Control
Vendor
CVE Published:
11 May 2020

What is CVE-2020-5538?

The vulnerability in Pallet Control versions 6.3 and earlier arises from improper access control, enabling authenticated attackers to execute arbitrary code with SYSTEM privileges on affected systems. Notably, users of PLS Management Add-on Module should be aware that all versions, including later ones, may still pose a risk. Adequate patching and version upgrades are essential to mitigate the impact of this vulnerability.

Affected Version(s)

PALLET CONTROL Ver. 6.3 and earlier

References

https://www.jalinfotec.co.jp/product/pallet/support/Info/...
x_refsource_MISC
https://jvn.jp/en/jp/JVN61849442/index.html
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.