CVE-2022-45793

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-45793
Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which will result in code execution with privileges of a different user.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-262-04 Third Party Advisory US Government Resource
https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/ Third Party Advisory
https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-009_en.pdf Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:omron:automation_software_sysmac_studio:*:*:*:*:*:*:*:*
History

22 Jan 2024, 17:15

Type Values Removed Values Added
Summary (en) [PROBLEMTYPE] in [VENDOR] [PRODUCT] [VERSION] on [PLATFORMS] allows [ATTACKER] to [IMPACT]. (en) Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which will result in code execution with privileges of a different user.

19 Jan 2024, 19:34

Type Values Removed Values Added
References () https://www.cisa.gov/news-events/ics-advisories/icsa-23-262-04 - () https://www.cisa.gov/news-events/ics-advisories/icsa-23-262-04 - Third Party Advisory, US Government Resource
References () https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/ - () https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/ - Third Party Advisory
References () https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-009_en.pdf - () https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-009_en.pdf - Vendor Advisory
First Time Omron
Omron automation Software Sysmac Studio
CPE cpe:2.3:a:omron:automation_software_sysmac_studio:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 5.5 		v2 : unknown
v3 : 7.8

11 Jan 2024, 13:57

Type Values Removed Values Added
Summary
  • (es) [PROBLEMTYPE] en [VENDOR] [PRODUCT] [VERSION] en [PLATFORMS] permite al [ATTACKER] hacer [IMPACT].

10 Jan 2024, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-01-10 21:15

Updated : 2024-01-22 17:15

NVD link : CVE-2022-45793

Mitre link : CVE-2022-45793

CVE.ORG link : CVE-2022-45793

JSON object : View

Products Affected

omron

  • automation_software_sysmac_studio
CWE
CWE-276

Incorrect Default Permissions