CVE-2022-22521
Privilege Escalation in Miele Benchmark Programming Tool
- State
- Published
- Severity
- 7.3 High
- Published
- Apr 27, 2022
- Updated
- Sep 16, 2024
- Reserved
- Jan 3, 2022
Description
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.3 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H | CERTVDE |
Weaknesses
- CWE-732 Incorrect Permission Assignment for Critical Resource
Affected Products
| Product | Versions |
|---|---|
Benchmark Programming ToolMiele |
|
References
- https://www.miele.de/p/miele-benchmark-programming-tool-2296.htm
- 20220427 SEC Consult SA-20220427-0 :: Privilege Escalation in Miele Benchmark Programming Toolmailing-list
- http://packetstormsecurity.com/files/166881/Miele-Benchmark-Programming-Tool-1.1.49-1.2.71-Privilege-Escalation.html
- https://cert.vde.com/en/advisories/VDE-2022-015/
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.