CyberRota Analysis
AI-GeneratedA privilege escalation vulnerability in FactoryTalk® Activation Manager affects Windows systems, allowing authenticated attackers with valid credentials to exploit installer actions that create console windows with SYSTEM privileges. By hijacking these console windows, attackers can gain a SYSTEM-level command prompt, granting them unrestricted access to files, processes, and system resources. Organizations using FactoryTalk® Activation Manager should prioritize addressing this issue to mitigate the risk of unauthorized access and potential system compromise.
Original NVD Description
A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An authenticated attacker with Windows credentials could hijack these console windows to obtain a SYSTEM-level command prompt, allowing full access to all files, processes, and system resources.