CVE-2022-50927

Summary

Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin group. Attackers can exploit the default user configuration to gain root access by manipulating system binaries and leveraging unrestricted sudo permissions.

Affected Software

Weaknesses

• CWE-266: Incorrect Privilege Assignment

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.exploit-db.com/exploits/50773
• https://www.vertiv.com/en-us/
• https://www.vulncheck.com/advisories/cyclades-serial-console-server-local-privilege-escalation

• ←Previous
• Next→