Description (CNA)
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Miele / Benchmark Programming Tool | affected 1.2.71 |
CWE
CWE-732
References
- https://www.miele.de/p/miele-benchmark-programming-tool-2296.htm
- http://seclists.org/fulldisclosure/2022/Apr/42
- http://packetstormsecurity.com/files/166881/Miele-Benchmark-Programming-Tool-1.1.49-1.2.71-Privilege-Escalation.html
- https://cert.vde.com/en/advisories/VDE-2022-015/
ADP enrichment
No English description supplied.