Published: 12/04/2022 Updated: 21/11/2024

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). Affected applications improperly assign permissions to critical directories and files used by the application processes. This could allow a local unprivileged malicious user to achieve code execution with ADMINISTRATOR or even NT AUTHORITY/SYSTEM privileges.

Vulnerable Product	Search on Vulmon	Subscribe to Product
siemens simatic energy manager basic
siemens simatic energy manager basic 7.3
siemens simatic energy manager pro
siemens simatic energy manager pro 7.3

Critical Infrastructure Sectors: Energy

CWE-732 CWE-732 https://nvd.nist.gov https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-11 https://www.first.org/epss https://cert-portal.siemens.com/productcert/pdf/ssa-655554.pdf https://cert-portal.siemens.com/productcert/pdf/ssa-655554.pdf

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-23448

Vulnerability Summary

Vulnerability Trend

ICS Advisories

References

Vulmon Search

About

Products

Connect