CVE-2022-23862

A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53

High · published October 22, 2024

CVSS v3.1
8.4
EPSS
0%
Percentile
40.8
In the wild
Unconfirmed
What it is

A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Because the service did not enforce authentication and was running under the "NT Authority\System" user, an attacker is able to use the vulnerability to execute arbitrary code and elevate to the system user.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00485 · 40.8th percentile
Published
2024-10-22T00:00Z
EPSS history
Timeline
  • 22 OCT 00:00Z
    A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53
    cvelistv5