Unrated severityNVD Advisory· Published Apr 12, 2022· Updated Aug 3, 2024
CVE-2022-23448
CVE-2022-23448
Description
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). Affected applications improperly assign permissions to critical directories and files used by the application processes. This could allow a local unprivileged attacker to achieve code execution with ADMINISTRATOR or even NT AUTHORITY/SYSTEM privileges.
Affected products
4- Range: < V7.3 Update 1
< V7.3 Update 1+ 2 more
- (no CPE)range: < V7.3 Update 1
- (no CPE)range: All versions < V7.3 Update 1
- (no CPE)range: All versions < V7.3 Update 1
Patches
Vulnerability mechanics
References
1- cert-portal.siemens.com/productcert/pdf/ssa-655554.pdfmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.