CVE-2015-7913: ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users...

Security readout for executives and security teams

This flaw lets someone who already has local access to a vulnerable Tibbo AggreGate server potentially run Java code as Windows SYSTEM. That changes a low-privileged local foothold into full control of the host. The supplied sources do not show active exploitation or a CVSS score. Exposure is most likely on Windows hosts running Tibbo AggreGate Server Service versions earlier than 5.30.06, especially where non-administrative users can log in locally or otherwise execute local actions. Prioritize remediation where AggreGate supports operational technology, building automation, or industrial monitoring. The main business risk is a local foothold becoming full server compromise. Treat as high priority if local access is shared, poorly controlled, or reachable through remote desktop workflows. Mitigation focus: Identify all Tibbo AggreGate Server Service installations and their versions.; Review vendor and ICS-CERT guidance for CVE-2015-7913.; Upgrade deployments older than 5.30.06 where applicable..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.