CVE-2024-22042

A vulnerability has been identified in Unicam FX (All versions). The windows installer agent used in affected product contains incorrect use of privileged APIs that trigger the Windows Console Host (conhost.exe) as a child process with SYSTEM privileges. This could be exploited by an attacker to perform a local privilege escalation attack.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://cert-portal.siemens.com/productcert/html/ssa-543502.html	Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-543502.html	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:siemens:unicam_fx:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-02-13 09:15

Updated : 2024-12-16 15:02

NVD link : CVE-2024-22042

Mitre link : CVE-2024-22042

CVE.ORG link : CVE-2024-22042

JSON object : View

Products Affected

siemens

unicam_fx

CWE

CWE-648

Incorrect Use of Privileged APIs

NVD-CWE-noinfo

{"id": "CVE-2024-22042", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2024-02-13T09:15:47.157", "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-543502.html", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-543502.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-648"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Unicam FX (All versions). The windows installer agent used in affected product contains incorrect use of privileged APIs that trigger the Windows Console Host (conhost.exe) as a child process with SYSTEM privileges. This could be exploited by an attacker to perform a local privilege escalation attack."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en Unicam FX (todas las versiones). El agente de instalaci\u00f3n de Windows utilizado en el producto afectado contiene un uso incorrecto de API privilegiadas que activan el host de la consola de Windows (conhost.exe) como un proceso secundario con privilegios de SYSTEMA. Un atacante podr\u00eda aprovechar esto para realizar un ataque de escalada de privilegios local."}], "lastModified": "2024-12-16T15:02:32.453", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:siemens:unicam_fx:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C6D5ECF-74F5-4FC8-90B5-DC4C3348BB40"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}