Lucene search
HistoryApr 10, 2023 - 3:15 p.m.
CVE-2022-41976
cve-2022-41976
scada-lts
privilege escalation
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0.004
Percentile
74.7%
An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role (e.g., to administrator) by updating their user profile.
Affected configurations
Node
scada-ltsscada-ltsRange<2.7.3
Related
cve
cve
CVE-2022-41976
2023-04-10 15:15:07
prion
prion
Privilege escalation
2023-04-10 15:15:00
osv
osv
CVE-2022-41976
2023-04-10 15:15:07
cvelist
cvelist
CVE-2022-41976
2023-04-10 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0.004
Percentile
74.7%
Related for NVD:CVE-2022-41976