Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Threat Group-3390 has used CVE-2014-6324 and CVE-2017-0213 to escalate privileges.