CVE-2022-22521highCWE-732

Privilege Escalation in Miele Benchmark Programming Tool

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.3epss 0.5%

probabilidad de explotación

0.5%top 59% de las CVE

explotación observada

noninguna fuente lo reporta

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin.

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Miele · Benchmark Programming Tool

Referencias

http://packetstormsecurity.com/files/166881/Miele-Benchmark-Programming-Tool-1.1.49-1.2.71-Privilege-Escalation.html https://cert.vde.com/en/advisories/VDE-2022-015/http://seclists.org/fulldisclosure/2022/Apr/42 https://www.miele.de/p/miele-benchmark-programming-tool-2296.htm