Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-3263

Measuresoft ScadaPro Server Improper Access Control

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Measuresoft ScadaPro Server

  • 6.7affected

References