Lucene search
PRIOn knowledge basePRION:CVE-2022-23448HistoryApr 12, 2022 - 9:15 a.m.
Code injection
2022-04-1209:15:00
PRIOn knowledge base
www.prio-n.com
1
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). Affected applications improperly assign permissions to critical directories and files used by the application processes. This could allow a local unprivileged attacker to achieve code execution with ADMINISTRATOR or even NT AUTHORITY/SYSTEM privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| simatic_energy_manager_basic | eq | 7.3 | |
| simatic_energy_manager_basic | lt | 7.3 | |
| simatic_energy_manager_pro | eq | 7.3 | |
| simatic_energy_manager_pro | lt | 7.3 |
Related
cve
cve
CVE-2022-23448
2022-04-12 09:15:14
nvd
nvd
CVE-2022-23448
2022-04-12 09:15:14
cvelist
cvelist
CVE-2022-23448
2022-04-12 09:07:35
ics
ics
Siemens SIMATIC Energy Manager
2022-04-14 12:00:00