CVE-2021-22665
https://notcve.org/view.php?id=CVE-2021-22665
Rockwell Automation DriveTools SP v5.13 and below and Drives AOP v4.12 and below both contain a vulnerability that a local attacker with limited privileges may be able to exploit resulting in privilege escalation and complete control of the system. DriveTools SP versiones v5.13 y anteriores de Rockwell Automation y Drives AOP versiones v4.12 y anteriores, contienen una vulnerabilidad que un atacante local con privilegios limitados puede ser capaz de explotar, resultando en una escalada de privilegios y un control completo del sistema • https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1129798 https://us-cert.cisa.gov/ics/advisories/icsa-21-042-02 • CWE-427: Uncontrolled Search Path Element •