CVE-2022-23448CWE-732

CVE-2022-23448: falha em Siemens SIMATIC Energy Manager Basic

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SIMATIC Energy Manager Basic+ Monitorar SIMATIC Energy Manager PRO

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.2%
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). Affected applications improperly assign permissions to critical directories and files used by the application processes. This could allow a local unprivileged attacker to achieve code execution with ADMINISTRATOR or even NT AUTHORITY/SYSTEM privileges.
Produtos afetados
Siemens · SIMATIC Energy Manager BasicSiemens · SIMATIC Energy Manager PRO
CVEs relacionadas — Siemens SIMATIC Energy Manager Basic

No mesmo produto, das mais perigosas para as menos.

CVE-2022-23450—CVE-2022-23450EPSS 35.7%CVE-2023-52891MEDIUMCVE-2023-52891EPSS 0.5%CVE-2022-23449—CVE-2022-23449EPSS 0.3%