description: HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow privilege escalation.
problem types: INCORRECT PERMISSION ASSIGNMENT FOR CRITICAL RESOURCE CWE-732
affected:
{
product: HMI/SCADA iFIX
vendor: n/a
versions:
status: affected, version: Versions 6.1 and prior
}