CVE-2021-44463

{"id": "CVE-2021-44463", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.3}, {"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 6.0, "exploitabilityScore": 1.5}]}, "published": "2022-01-28T20:15:12.137", "references": [{"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-21-355-04", "tags": ["Mitigation", "Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All versions) when some DeltaV services are started."}, {"lang": "es", "value": "Unas DLLs que faltan, si son reemplazadas por un insider, podr\u00edan permitir a un atacante lograr una escalada local de privilegios en DeltaV Distributed Control System Controllers and Workstations (Todas las versiones) cuando son iniciados algunos servicios DeltaV"}], "lastModified": "2022-07-12T17:16:13.007", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:emerson:deltav:13.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01456184-6B25-4029-82D4-F5BF16180D7D"}, {"criteria": "cpe:2.3:a:emerson:deltav:14:feature_pack1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2061D08-4DF5-473E-A68A-C1E6DD1EEA37"}, {"criteria": "cpe:2.3:a:emerson:deltav:14:feature_pack2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06B9E5CA-A790-4298-AA75-A10D62ECCD57"}, {"criteria": "cpe:2.3:a:emerson:deltav:14.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C96A8836-877A-4796-9A28-E7D9AB412024"}, {"criteria": "cpe:2.3:a:emerson:deltav:r6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "713DC40C-D9B9-43AA-9907-150467EAE43F"}], "operator": "OR"}]}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}