← CVE Intelligence

CVE-2022-31465

Siemens / Xpedition Designer VX.2.10 PUBLISHED

Description (CNA)

A vulnerability has been identified in Xpedition Designer VX.2.10 (All versions < VX.2.10 Update 13), Xpedition Designer VX.2.11 (All versions < VX.2.11 Update 11), Xpedition Designer VX.2.12 (All versions < VX.2.12 Update 5), Xpedition Designer VX.2.13 (All versions < VX.2.13 Update 1). The affected application assigns improper access rights to the service executable. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.

Affected (CNA)

Vendor / productVersions
Siemens / Xpedition Designer VX.2.10affected All versions < VX.2.10 Update 13
Siemens / Xpedition Designer VX.2.11affected All versions < VX.2.11 Update 11
Siemens / Xpedition Designer VX.2.12affected All versions < VX.2.12 Update 5
Siemens / Xpedition Designer VX.2.13affected All versions < VX.2.13 Update 1

CWE

CWE-732

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.