Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-31465

A vulnerability has been identified in Xpedition Designer VX.2.10 (All versions < VX.2.10 Update 13), Xpedition Designer VX.2.11 (All versions < VX.2.11 Update 11), Xpedition Desig

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in Xpedition Designer VX.2.10 (All versions < VX.2.10 Update 13), Xpedition Designer VX.2.11 (All versions < VX.2.11 Update 11), Xpedition Designer VX.2.12 (All versions < VX.2.12 Update 5), Xpedition Designer VX.2.13 (All versions < VX.2.13 Update 1). The affected application assigns improper access rights to the service executable. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens Xpedition Designer VX.2.10

Default version status: unknown

  • All versions < VX.2.10 Update 13affected

Siemens Xpedition Designer VX.2.11

Default version status: unknown

  • All versions < VX.2.11 Update 11affected

Siemens Xpedition Designer VX.2.12

Default version status: unknown

  • All versions < VX.2.12 Update 5affected

Siemens Xpedition Designer VX.2.13

Default version status: unknown

  • All versions < VX.2.13 Update 1affected

References