VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 12, 2022· Updated Jun 17, 2026

CVE-2022-23448

CVE-2022-23448

Description

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). Affected applications improperly assign permissions to critical directories and files used by the application processes. This could allow a local unprivileged attacker to achieve code execution with ADMINISTRATOR or even NT AUTHORITY/SYSTEM privileges.

Affected products

8
  • Siemens Foundation/Simatic Energy Manager Basic5 versions
    cpe:2.3:a:siemens:simatic_energy_manager_basic:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:siemens:simatic_energy_manager_basic:*:*:*:*:*:*:*:*range: <7.3
    • cpe:2.3:a:siemens:simatic_energy_manager_basic:7.3:-:*:*:*:*:*:*
    • (no CPE)range: < V7.3 Update 1
    • (no CPE)range: All versions < V7.3 Update 1
    • (no CPE)range: All versions < V7.3 Update 1
  • Siemens Foundation/Simatic Energy Manager Pro3 versions
    cpe:2.3:a:siemens:simatic_energy_manager_pro:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:siemens:simatic_energy_manager_pro:*:*:*:*:*:*:*:*range: <7.3
    • cpe:2.3:a:siemens:simatic_energy_manager_pro:7.3:-:*:*:*:*:*:*
    • (no CPE)range: < V7.3 Update 1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.