Summary
Successful exploitation of these vulnerabilities could allow an attacker to leverage the misconfigured privileges to the installed directory and achieve code execution in the application 's context and permissions.
Vulnerabilities 2
-
Medium 5.6
WIN-911 2021 Incorrect Default Permissions
WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the program Operator Workspace directory, which holds DLL files and executables. A low-privilege attacker could write a malicious DLL …
-
Medium 5.6
WIN-911 2021 Incorrect Default Permissions
WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the Program Announcer directory and elevate permissions whenever the program is executed.
Revision history
-
#1
ICSA-22-053-03 WIN-911 2021 R1 and R2
References
-
ICS Advisory ICSA-22-053-03 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-053-03
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-22-053-03
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B