Lucene search
MitreCVELIST:CVE-2022-41976HistoryApr 10, 2023 - 12:00 a.m.
CVE-2022-41976
2023-04-1000:00:00
mitre
www.cve.org
2
scada-lts
privilege escalation
remote attackers
authenticated
low-privileged user
change role
administrator
user profile
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.004
Percentile
74.7%
An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role (e.g., to administrator) by updating their user profile.
Related
cve
cve
CVE-2022-41976
2023-04-10 15:15:07
nvd
nvd
CVE-2022-41976
2023-04-10 15:15:07
prion
prion
Privilege escalation
2023-04-10 15:15:00
osv
osv
CVE-2022-41976
2023-04-10 15:15:07
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.004
Percentile
74.7%
Related for CVELIST:CVE-2022-41976