CyberSecBulletin

Win-911 vulnerabilities

We track 2 vulnerabilities in Win-911 products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 24, 2022.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Win-911 vulnerabilities

  • 7.8 High severity

    WIN-911: Incorrect Default Permissions

    CVE-2022-23922Win-911

    WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the Program Announcer directory and elevate permissions whenever the program is executed.

  • 7.8 High severity

    WIN-911: Incorrect Default Permissions

    CVE-2022-23104Win-911

    WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the program Operator Workspace directory, which holds DLL files and executables. A low-privilege attacker could write a malicious DLL f