CVE-2017-12728
HighSummary
An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior. Authenticated, non-administrative local users are able to alter service executables with escalated privileges.
Risk Assessment
The ability to execute arbitrary code under the context of current system services poses a serious security threat to the organization, potentially leading to unauthorized access and losses.
Recommendation
It is recommended to update to the latest version of SpiderControl SCADA Web Server to mitigate this vulnerability and to restrict access to local user accounts.
Other vulnerabilities in SpiderControl SCADA Web Server
Original NVD description (English source)
An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior. Authenticated, non-administrative local users are able to alter service executables with escalated privileges, which could allow an attacker to execute arbitrary code under the context of the current system services.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS