The vulnerability of the Local Discovery Server (LDS) software from Siemens, related to the improper assignment of permissions for critical resources, allows a perpetrator to increase their privileges.

🗓️ 28 Aug 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 6 Views

Siemens Local Discovery Server vulnerability allows privilege escalation via improper permissions on critical resources.

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2022-44725	18 Nov 202200:17	–	circl
CNNVD	OPC Foundation Local Discovery Server 安全漏洞	17 Nov 202200:00	–	cnnvd
CVE	CVE-2022-44725	17 Nov 202200:00	–	cve
Cvelist	CVE-2022-44725	17 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-47659	3 Oct 202520:07	–	euvd
ICS	Siemens in OPC Foundation Local Discovery Server	11 Apr 202300:00	–	ics
ICS	Siemens OPC Foundation Local Discovery Server Affecting Siemens Products	11 Apr 202300:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	11 Apr 202300:00	–	ncsc
NCSC	Vulnerabilities fixed in Siemens products	9 Apr 202400:00	–	ncsc
NVD	CVE-2022-44725	17 Nov 202222:15	–	nvd

Vulners

Node

siemens_ag siemens_simatic_net_pc_softwareMatch15

OR

siemens_ag siemens_simatic_net_pc_softwareMatch16

OR

siemens_ag telecontrol_server_basicMatch3

OR

siemens_ag siemens_simatic_net_pc_softwareMatch14

OR

siemens_ag simatic_winccRange<8.0

OR

opc local_discovery_server_(lds)Range<1.04.405.479

OR

siemens_ag siemens_simatic_net_pc_softwareMatch18

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-691715.pdf
files	www.files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-44725.pdf
web	www.web.nvd.nist.gov/view/vuln/detail

28 Aug 2023 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 26.8

CVSS 37.8

EPSS0.0017

Siemens Local Discovery Server privilege escalation improper permissions critical resources