PT-2022-11966 · Fanuc · Roboguide

Published 2022-04-20 · Updated 2022-10-17 · CVE-2021-43986

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Affected product (affected versions not specified)

Description The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Incorrect Default Permissions

Weakness Enumeration

CWE-284

CWE-276

Related Identifiers

CVE-2021-43986

Affected Products

Roboguide

References · 5

• https://osv.dev/vulnerability/CVE-2021-43986 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43986 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-109-03 · Patch
• https://t.me/cvenotify/29215 · Telegram Post
• https://t.me/cibsecurity/41178 · Telegram Post