CVE-2022-38466

A vulnerability has been identified in CoreShield One-Way Gateway OWG Software All versions V2.2. The default installation sets insecure file permissions that could allow a local attacker to escalate privileges to local administrator...

CVE-2022-38466

The CVE-2022-38466 entry affects Siemens/CoreShield OWG Software: all versions prior to 2.2 are vulnerable due to insecure file permissions set by default during installation. This can allow a local attacker to escalate privileges to local administrator. The issue is classified with CVSS v3.1 bas...

Siemens Mobility CoreShield OWG Software

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Mobility Equipment: CoreShield One-Way Gateway OWG Software Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to leverage the default...