CVE-2022-50927CWE-266

Cyclades Serial Console Server 3.3.0 - Local Privilege Escalation

High · published January 13, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin group. Attackers can exploit the default user configuration to gain root access by manipulating system binaries and leveraging unrestricted sudo permissions.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00161 · 5.0th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2026-01-13T22:51Z
EPSS history
Timeline
  • 13 JAN 22:51Z
    Cyclades Serial Console Server 3.3.0 - Local Privilege Escalation
    cvelistv5