What’s Vulnerable › Vulnerabilities

CVE-2020-9002

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-01 · updated 2026-06-17
• Weakness: CWE-20

Description

An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANY_ADMIN to UserRoleKey=DOMAIN_ADMIN (to achieve Domain Administrator access).

Affected products

• Iportalis Control Portal: 7.1.13.0

References

• https://websec.nl/blog/
• https://websec.nl/blog/6127847280e759c7d31286d0/cve%20report%20august%202021/
• https://websec.nl/blog/
• https://websec.nl/blog/6127847280e759c7d31286d0/cve%20report%20august%202021/

Get alerted when CVE-2020-9002 or the next vulnerability affects your stack