Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WIN-911 2021 Incorrect Default Permissions
Vulnerability Description
WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the program Operator Workspace directory, which holds DLL files and executables. A low-privilege attacker could write a malicious DLL file to the Operator Workspace directory to achieve privilege escalation and the permissions of the user running the program.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L
Vulnerability Type
缺省权限不正确
Vulnerability Title
Win-911 安全漏洞
Vulnerability Description
Win-911是美国Win-911公司的一个安全软件。用于工业设备警报安全。 WIN-911 2021存在安全漏洞，该漏洞源于产品存在权限配置错误的问题，这可能允许攻击者可利用该漏洞将文件本地写入程序Operator Workspace目录，该目录保存DLL文件和可执行文件。低权限攻击者可利用该漏洞可以将恶意DLL文件写入Operator Workspace目录，以实现权限升级和运行程序的用户的权限。
CVSS Information
N/A
Vulnerability Type
N/A