CVE-2022-50927
Cyclades Serial Console Server 3.3.0 - Local Privilege Escalation
- State
- Published
- Severity
- 8.5 High
- Published
- Jan 13, 2026
- Updated
- Apr 7, 2026
- Reserved
- Jan 11, 2026
Description
Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin group. Attackers can exploit the default user configuration to gain root access by manipulating system binaries and leveraging unrestricted sudo permissions.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 6.2 Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-266 Incorrect Privilege Assignment
Affected Products
| Product | Versions |
|---|---|
Cyclades Serial Console ServerVertiv |
|
References
- ExploitDB-50773exploit
- Vertiv Official Homepageproduct
- VulnCheck Advisory: Cyclades Serial Console Server 3.3.0 - Local Privilege Escalationthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.