Local privilege escalation via writable project files

Incorrect permissions in FactoryTalk View Site Edition 13.0 allow local users to run code with elevated privileges through writable HMI project files. Default access controls on the HMI projects folder allow any local user to edit or replace files that a higher-privileged account later executes. A low-privileged local account can replace project content and gain the privileges of the account that executes it.