CVE-2021-43986

MEDIUM

6.0

Description

The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalation.

CVE Details

CVSS v3.1 Score6.0

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H

Attack VectorLOCAL

ComplexityHIGH

Privileges RequiredLOW

User InteractionREQUIRED

Published4/20/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

fanuc:roboguide

Weaknesses (CWE)

CWE-284CWE-276

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03(ics-cert@hq.dhs.gov)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-109-03(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.