Unrated severityNVD Advisory· Published Jun 24, 2022· Updated Apr 16, 2025
3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250
CVE-2022-1517
Description
LRM utilizes elevated privileges. An unauthenticated malicious actor can upload and execute code remotely at the operating system level, which can allow an attacker to change settings, configurations, software, or access sensitive data on the affected produc. An attacker could also exploit this vulnerability to access APIs not intended for general use and interact through the network.
Affected products
1- Range: LRM Versions 1.3 to 3.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.cisa.gov/uscert/ics/advisories/icsa-22-153-02mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.