Lucene search

K
cvelistDragosCVELIST:CVE-2022-45793
HistoryJan 10, 2024 - 8:49 p.m.

CVE-2022-45793 Executable files writable by low-privileged users in Omron Sysmac Studio

2024-01-1020:49:36
CWE-276
Dragos
www.cve.org
3
cve-2022-45793
executable files
low-privileged users
omron sysmac studio
code execution

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0

Percentile

9.5%

Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which will result in code execution with privileges of a different user.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "platforms": [
      "Windows",
      "64 bit",
      "32 bit"
    ],
    "product": "Sysmac Studio",
    "vendor": "Omron",
    "versions": [
      {
        "lessThanOrEqual": "1.54.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0

Percentile

9.5%

Related for CVELIST:CVE-2022-45793