CVE-2022-3263CWE-284

Measuresoft ScadaPro Server Improper Access Control

High · published September 23, 2022

CVSS v3.1
7.8
EPSS
0%
Percentile
16.8
In the wild
Unconfirmed
What it is

The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2022-09-23T18:30Z
EPSS history
Timeline
  • 23 SEP 18:30Z
    Measuresoft ScadaPro Server Improper Access Control
    cvelistv5