CVEvulnerability

CVE-2024-22042

7.8 HIGH Published 2024-02-13 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-02-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-648

Description

A vulnerability has been identified in Unicam FX (All versions). The windows installer agent used in affected product contains incorrect use of privileged APIs that trigger the Windows Console Host (conhost.exe) as a child process with SYSTEM privileges. This could be exploited by an attacker to perform a local privilege escalation attack.

Affected configurations

• siemens unicam fx

Related

Weakness · CWE (1)

  • CWE-648 Incorrect Use of Privileged APIs weakness

References