← CVE Intelligence

CVE-2022-23448

Siemens / SIMATIC Energy Manager Basic PUBLISHED

Description (CNA)

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). Affected applications improperly assign permissions to critical directories and files used by the application processes. This could allow a local unprivileged attacker to achieve code execution with ADMINISTRATOR or even NT AUTHORITY/SYSTEM privileges.

Affected (CNA)

Vendor / productVersions
Siemens / SIMATIC Energy Manager Basicaffected All versions < V7.3 Update 1
Siemens / SIMATIC Energy Manager PROaffected All versions < V7.3 Update 1

CWE

CWE-732

References

ADP enrichment

CVE

No English description supplied.