Threats tagged 'ghsa-qcw9-8pcc-76g9'

An Incorrect Privilege Assignment vulnerability affects Mitsubishi Electric GENESIS64 and related ICONICS products version 10.97.3 and prior, as well as MC Works64 all versions. The vulnerability arises because installers grant default DCOM permissions to the administrator account unnecessarily. This allows an attacker with access to the administrator account to launch and operate DCOM objects locally or remotely without required UAC elevation. Exploitation can lead to disclosure, tampering, destruction, or deletion of internal information, or cause a denial-of-service condition.