This vulnerability involves insecure permissions in ics-park v2.0, enabling a remote attacker to escalate privileges by exploiting the /system/role/save and system/user/update endpoints. These endpoints are part of the RoleController and UserController components respectively. The vulnerability allows unauthorized privilege escalation due to improper access controls on these endpoints. No further technical details or exploitation methods are provided in the source data.

The impact is privilege escalation by a remote attacker, which could lead to unauthorized access or control over system roles and user data. This could compromise the integrity and security of the affected system. However, no known exploits in the wild have been reported, and the extent of impact depends on the deployment and usage of the vulnerable endpoints.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is provided, users should monitor vendor communications for updates. Until a fix is available, restricting access to the affected endpoints and implementing strict access controls may help mitigate risk.