CVE-2021-38483
Assigner: icscert
Published: 2022-04-19T00:00:00
State: PUBLISHED
affected: product: ROBOGUIDE
vendor: FANUC
versions: lessThan: v9.40083.00.05 (Rev T)
status: affected
version: All
versionType: custom
credits: value: Sharon Brizinov with Claroty reported these vulnerabilities to CISA.
datePublic: 2022-04-19T00:00:00
descriptions: value: The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation.
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-732
description: CWE-732 Incorrect Permission Assignment for Critical Resource
type: CWE
solutions: value: FANUC has created a new version to address these vulnerabilities. Users may obtain and install the new version by downloading ROBOGUIDE v9 Rev U or higher from the FANUC or FANUC America website (login required).
source: advisory: ICSA-22-109-03
discovery: EXTERNAL
title: ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform
x_generator: engine: Vulnogram 0.0.9