CVEvulnerability

CVE-2022-23449

7.3 HIGH Published 2022-04-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-427

Description

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path.

Affected configurations

• siemens simatic energy manager basic (< 7.3) • siemens simatic energy manager basic 7.3 • siemens simatic energy manager pro (< 7.3) • siemens simatic energy manager pro 7.3

Related

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References