Описание
The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Designer User) to embed OLE objects into graphics, and escalate their privileges to the identity of a victim user who subsequently interacts with the graphical elements.
Ссылки
- Third Party Advisory
- Permissions Required
- Vendor Advisory
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
EPSS
7.4 High
CVSS3
7.7 High
CVSS3
Дефекты
Связанные уязвимости
The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Designer User) to embed OLE objects into graphics, and escalate their privileges to the identity of a victim user who subsequently interacts with the graphical elements.
Уязвимость программного обеспечения для онлайн-моделирования и оптимизации процессов AVEVA Process Optimization, связанная с использованием потенциально опасных функций, позволяющая нарушителю повысить свои привилегии
EPSS
7.4 High
CVSS3
7.7 High
CVSS3