Improper access control in Windows Remote Access API allows an authorized attacker to perform tampering locally.
CWE-862