CVE-2024-22016 Incorrect Permission Assignment for Critical Resource in Rapid SCADA

2024-02-0123:19:59

CWE-732

icscert

raw.githubusercontent.com

cve-2024-22016

incorrect permission assignment

rapid scada

privilege escalation

critical resource

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.3%

JSON

In Rapid Software LLC’s Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation.