← Back

CVE-2022-23449

nvd nist
Published: Apr 12, 2022Modified: Nov 21, 2024

JSON object

Loading...
7.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.3 / Impact: 5.9
Source: NVD

Description

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path.

Affected (4)

Siemens
2 products
Simatic Energy Manager Basic
Simatic Energy Manager Pro
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Siemens
Simatic Energy Manager Basic
Before 7.3
Simatic Energy Manager Basic
Version 7.3
Siemens
Simatic Energy Manager Pro
Before 7.3
Simatic Energy Manager Pro
Version 7.3

Related CWEs

CWE-427
Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (2)

Source: productcert@siemens.com
MitigationPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationPatchVendor Advisory

Timeline

No history available yet.