The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 (all firmware versions prior to 02A04.1).

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-27454
• https://us-cert.cisa.gov/ics/advisories/icsa-21-082-03