CVE-2024-22016CWE-732

Incorrect Permission Assignment for Critical Resource in Rapid SCADA

High · published February 1, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.7th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2024-02-01T23:19Z
EPSS history
Timeline
  • 01 FEB 23:19Z
    Incorrect Permission Assignment for Critical Resource in Rapid SCADA
    cvelistv5