Vulnerability Description
A vulnerability has been identified in Xpedition Designer VX.2.10 (All versions < VX.2.10 Update 13), Xpedition Designer VX.2.11 (All versions < VX.2.11 Update 11), Xpedition Designer VX.2.12 (All versions < VX.2.12 Update 5), Xpedition Designer VX.2.13 (All versions < VX.2.13 Update 1). The affected application assigns improper access rights to the service executable. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Xpedition Designer | < vx.2.11 |
Related Weaknesses (CWE)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-988345.pdfVendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-988345.pdfVendor Advisory
FAQ
What is CVE-2022-31465?
CVE-2022-31465 is a vulnerability with a CVSS score of 7.8 (HIGH). A vulnerability has been identified in Xpedition Designer VX.2.10 (All versions < VX.2.10 Update 13), Xpedition Designer VX.2.11 (All versions < VX.2.11 Update 11), Xpedition Designer VX.2.12 (All ver...
How severe is CVE-2022-31465?
CVE-2022-31465 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-31465?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Xpedition Designer.