CVE-2022-22521

Privilege Escalation in Miele Benchmark Programming Tool

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin.

Affected

Miele · Benchmark Programming Tool

CVSS v3.1 NVD

7.3 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.53% chance of exploitation in the next 30 days, 44th percentile

Published

2022-04-27

Updated

2024-09-16

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/166881/Miele-Benchmark-Programming-Tool-1.1.49-1.2.7…
• http://seclists.org/fulldisclosure/2022/Apr/42

Security advisories

• https://www.miele.de/p/miele-benchmark-programming-tool-2296.htm
• https://cert.vde.com/en/advisories/VDE-2022-015

References

• CVE Record
• NVD entry