Skip to content

CVE-2022-3263 Measuresoft ScadaPro Server Improper Access Control

HighCVSS 7.8 EPSS 0.26%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges.

Affected products

ProductAffected versionsFixed in
measuresoft scadapro server = 6.7 No fix listed

References

  • www.cisa.gov mitigation third-party-advisory us-government-resource