Valmet DNA Local Privilege Escalation Vulnerability via Insecure DCOM Configuration

A local privilege escalation vulnerability has been identified in Valmet DNA versions prior to C2023, stemming from an insecure DCOM configuration. The DCOM object 'Valmet DNA Engineering' is misconfigured, allowing it to execute commands as a user with the 'SeImpersonatePrivilege'. This Windows permission enables a process to impersonate another user, potentially allowing an attacker to escalate privileges and gain full control of the system.

Impact

Exploitation of this vulnerability allows local users to escalate privileges to 'SYSTEM', thereby gaining complete control over the affected system.

Remediation

Users can obtain the patched version through Valmet Automation Customer Service.