CVE-2022-50927

Impact

Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin group. Attackers can exploit the default user configuration to gain root access by manipulating system binaries and leveraging unrestricted sudo permissions.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://www.exploit-db.com/exploits/50773
• https://www.vertiv.com/en-us/
• https://www.vulncheck.com/advisories/cyclades-serial-console-server-local-privilege-escalation