Lucene search

K
cvelistIcscertCVELIST:CVE-2021-38483
HistoryApr 20, 2022 - 3:30 p.m.

CVE-2021-38483 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

2022-04-2015:30:30
CWE-732
icscert
www.cve.org
5
vulnerability
fanuc roboguide
misconfigured binaries
privilege escalation
system level privileges

CVSS3

6

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0

Percentile

10.4%

The affected product is vulnerable to misconfigured binaries, allowing users on the target PC with SYSTEM level privileges access to overwrite the binary and modify files to gain privilege escalation.

CNA Affected

[
  {
    "product": "ROBOGUIDE",
    "vendor": "FANUC",
    "versions": [
      {
        "lessThan": "v9.40083.00.05 (Rev T)",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

6

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0

Percentile

10.4%

Related for CVELIST:CVE-2021-38483