{"id":"CVE-2022-50927","state":"PUBLISHED","title":"Cyclades Serial Console Server 3.3.0 - Local Privilege Escalation","description":"Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin group. Attackers can exploit the default user configuration to gain root access by manipulating system binaries and leveraging unrestricted sudo permissions.","publishedAt":"2026-01-13T22:51:57.536Z","updatedAt":"2026-04-07T14:06:41.904Z","severity":{"score":8.5,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Vertiv Cyclades Serial Console Server"],"affected":[{"vendor":"Vertiv","product":"Cyclades Serial Console Server","versions":[{"version":"1.0.0 - 3.3.0","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/50773","https://www.vertiv.com/en-us/","https://www.vulncheck.com/advisories/cyclades-serial-console-server-local-privilege-escalation"],"weaknesses":["CWE-266"],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/50xxx/CVE-2022-50927.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-50927","state":"PUBLISHED","datePublished":"2026-01-13T22:51:57.536Z","dateUpdated":"2026-04-07T14:06:41.904Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-01-11T13:34:26.328Z"},"containers":{"cna":{"title":"Cyclades Serial Console Server 3.3.0 - Local Privilege Escalation","descriptions":[{"lang":"en","value":"Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin group. Attackers can exploit the default user configuration to gain root access by manipulating system binaries and leveraging unrestricted sudo permissions."}],"affected":[{"vendor":"Vertiv","product":"Cyclades Serial Console Server","versions":[{"version":"1.0.0 - 3.3.0","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/50773","name":"ExploitDB-50773","tags":["exploit"]},{"url":"https://www.vertiv.com/en-us/","name":"Vertiv Official Homepage","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/cyclades-serial-console-server-local-privilege-escalation","name":"VulnCheck Advisory: Cyclades Serial Console Server 3.3.0 - Local Privilege Escalation","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":8.5,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":6.2,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-266","lang":"en","description":"Incorrect Privilege Assignment","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-04-07T14:06:41.904Z"},"x_generator":{"engine":"vulncheck"},"datePublic":"2022-02-21T00:00:00.000Z"},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-01-14T15:49:56.531153Z","id":"CVE-2022-50927","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-14T19:19:30.431Z"}}]}}}