CVE-2021-43986

MEDIUM

6.0

Beschreibung

The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalation.

CVE Details

CVSS v3.1 Bewertung6.0

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H

AngriffsvektorLOCAL

KomplexitatHIGH

Erforderliche PrivilegienLOW

BenutzerinteraktionREQUIRED

Veroffentlicht4/20/2022

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

fanuc:roboguide

Schwachen (CWE)

CWE-284CWE-276

Referenzen

https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03(ics-cert@hq.dhs.gov)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.