CWE Code: 276
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Incorrect Default Permissions
Summary: an incorrect default permissions issue was discovered in schneider electric wonderware indusoft web studio v8.0 patch 3 and prior versions. upon installation, wonderware indusoft web studio creates a new directory and two files, which are placed in the system's path and can be manipulated by non-administrators. this could allow an authenticated user to escalate his or her privileges.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-05-19
Last Modified Date: 2019-10-09