This vulnerability arises from incorrect privilege assignment in the network driver of Cisco Terminal Services Agent. An attacker with user-level credentials can send crafted network traffic to an affected device, causing the system to incorrectly map network connections to user accounts. This flaw allows the attacker to bypass firewall restrictions tied to their own account and instead inherit the firewall rules of a different user, potentially escalating their network access privileges. The CVSS 3.1 base score is 5.0, reflecting a medium severity with network attack vector, low attack complexity, required privileges at the user level, no user interaction, and a scope change. Confidentiality is not impacted, but integrity can be compromised, and availability is unaffected. There is no vendor advisory or patch information available at this time.

An authenticated remote attacker with user-level privileges can bypass firewall rules associated with their own account by inheriting firewall rules of another user. This could lead to unauthorized network access or privilege escalation within the affected system. The vulnerability does not affect confidentiality or availability but impacts integrity by allowing unauthorized modification or bypass of firewall policies.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict user-level access to trusted users only and monitor for unusual network activity related to firewall rule bypass attempts. Avoid relying solely on firewall rules tied to user accounts for critical security enforcement.