The vulnerability is an authorization bypass that allows users who have valid authentication to elevate their privileges across defined role boundaries. It stems from improper privilege management, enabling an attacker to gain higher-level permissions than intended. The impact is that an attacker, once authenticated, can potentially control sensitive data or perform administrative actions, compromising both confidentiality and integrity of the system.

The affected product is Tata Consultancy Services Cognix Recon Client version 3.0. No other vendors or product versions are listed as affected.

The vulnerability received a high severity CVSS score of 8.8, indicating a serious risk. The EPSS score is less than 1%, suggesting that exploitation in the wild is currently unlikely. It is not listed in the CISA Known Exploited Vulnerabilities catalog. The attack requires authenticated access and the ability to craft specific requests to trigger the privilege escalation. The typical attack vector is an authenticated user sending specially crafted API requests within the Cognix Recon Client. Based on the description, the likely attack vector is an authenticated user sending such requests.