VMS Privilege Escalation: When Edit Rights Become Server Control | CUP Micro Brief

Application edit rights and operating-system administration are not the same security boundary. This CUP Micro Brief shows how an over-privileged video-management service can turn a limited application role into control of the underlying server. Related CUP episodes: Siemens Siveillance: When Edit Access Enables Code Execution Johnson Controls Airwall: The Risk Behind a Hardcoded Key Industrial Identity Security: The Risk in Software-Defined Factories