{"id":"CVE-2022-22521","aliases":["EUVD-2022-27667","GHSA-x568-473g-qj6x"],"status":"published","title":"Privilege Escalation in Miele Benchmark Programming Tool","description":"In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.0053,"percentile":0.45294,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269","CWE-732"],"published":"2022-04-27T15:15:36Z","modified":"2026-06-17T04:28:31Z","products":[{"vendor":"miele","product":"benchmark programming tool"},{"vendor":"miele","product":"benchmark_programming_tool"}],"references":[{"url":"https://www.miele.de/p/miele-benchmark-programming-tool-2296.htm","tags":["x_refsource_MISC","x_transferred","Patch","Product","Release Notes","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/Apr/42","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Exploit","Mailing List","Patch","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/166881/Miele-Benchmark-Programming-Tool-1.1.49-1.2.71-Privilege-Escalation.html","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://cert.vde.com/en/advisories/VDE-2022-015/","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22521"},{"url":"https://cert.vde.com/en/advisories/VDE-2022-015"},{"url":"https://github.com/advisories/GHSA-x568-473g-qj6x"}],"sources":{"cve":[{"id":"CVE-2022-22521","title":"Privilege Escalation in Miele Benchmark Programming Tool","description":"In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin.","status":"published","published":"2022-04-27T15:15:36.343Z","modified":"2024-09-16T17:34:05.874Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:34:26.645563Z"}],"euvd":[{"id":"EUVD-2022-27667","description":"In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin.","status":"published","published":"2022-04-27T15:15:36Z","modified":"2024-09-16T17:34:05Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:55:40.580982Z"}],"ghsa":[{"id":"GHSA-x568-473g-qj6x","title":"In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated...","description":"In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed by users with administrative privileges. An attacker could thereby obtain higher permissions. The attacker must already have access to the corresponding local system to be able to exchange the files.","status":"published","published":"2022-04-28T00:00:29Z","modified":"2024-09-16T18:32:24Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269","CWE-732"],"updated_at":"2026-11-02T14:58:17.022968Z"}],"nvd":[{"id":"CVE-2022-22521","description":"In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin.","status":"published","published":"2022-04-27T16:15:11.737Z","modified":"2026-06-17T04:28:31.453Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:07:18.660414Z"}]}}