Chris Morales, head of security analytics at Vectra, said the vulnerabilities also allow for a privilege escalation after an attacker gains access to a system with a user account.