Insufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally.
CWE-1220