CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Permissions Privileges and Access Controls
Summary: an issue was discovered in sprecher automation sprecon-e service program before 3.43 sp0. under certain preconditions, it is possible to execute telegram simulation as a non-admin user. as prerequisites, a user must have created an online-connection, validly authenticated and authorized as administrator, and executed telegram simulation. after that, the online-connection must have been closed. incorrect caching of client data then may lead to privilege escalation, where a subsequently acting non-admin user is permitted to do telegram simulation. in order to exploit this vulnerability, a potential attacker would need to have both a valid engineering-account in the sprecon rbac system as well as access to a service/maintenance computer with sprecon-e service program running. additionally, a valid admin-user must have closed the service connection beforehand without closing the program, having executed telegram simulation; the attacker then has access to the running software instance. hence, there is no risk from external attackers.
Access Authentication: SINGLE
Access Complexity: HIGH
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2016-12-25
Last Modified Date: 2017-01-07