high7.3
CVE-2022-22521
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges.
Impact
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Miele | Benchmark Programming Tool | before 1.2.72 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/166881/Miele-Benchmark-Programming-Tool-1.1.49-1.2.71-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2022/Apr/42
- https://cert.vde.com/en/advisories/VDE-2022-015/
- https://www.miele.de/p/miele-benchmark-programming-tool-2296.htm
- http://packetstormsecurity.com/files/166881/Miele-Benchmark-Programming-Tool-1.1.49-1.2.71-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2022/Apr/42
- https://cert.vde.com/en/advisories/VDE-2022-015/
- https://www.miele.de/p/miele-benchmark-programming-tool-2296.htm