CVE-2022-41976

An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role e.g., to administrator by updating their user profile...

CVE-2022-41976

An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role e.g., to administrator by updating their user profile...

CVE-2022-41976

Summary: CVE-2022-41976 affects Scada-LTS v2.7.1.1 build 2948559113. A privileged escalation exists where an authenticated, low-privileged user can modify their own user profile to gain higher rights (e.g., administrator). The root cause is an authorization issue in the user profile update pathwa...