{"id":"CVE-2022-39062","aliases":["EUVD-2022-41608","GHSA-v954-24v7-pmr2"],"status":"published","title":"A vulnerability has been identified in SICAM TOOLBOX II (All versions \u003c V07.10). Affected...","description":"A vulnerability has been identified in SICAM TOOLBOX II (All versions \u003c V07.10). Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00165,"percentile":0.05774,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-732"],"published":"2023-08-08T09:20:11Z","modified":"2026-06-17T04:57:31Z","products":[{"vendor":"siemens","product":"sicam toolbox ii"},{"vendor":"siemens","product":"sicam_toolbox_ii"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-975961.pdf","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39062"},{"url":"https://github.com/advisories/GHSA-v954-24v7-pmr2"}],"sources":{"cve":[{"id":"CVE-2022-39062","description":"A vulnerability has been identified in SICAM TOOLBOX II (All versions \u003c V07.10). Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation.","status":"published","published":"2023-08-08T09:20:11.51Z","modified":"2025-02-27T21:10:34.368Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:34:39.233406Z"}],"euvd":[{"id":"EUVD-2022-41608","description":"A vulnerability has been identified in SICAM TOOLBOX II (All versions \u003c V07.10). Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation.","status":"published","published":"2023-08-08T09:20:11Z","modified":"2025-02-27T21:10:34Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T20:53:20.548403Z"}],"ghsa":[{"id":"GHSA-v954-24v7-pmr2","title":"A vulnerability has been identified in SICAM TOOLBOX II (All versions \u003c V07.10). Affected...","description":"A vulnerability has been identified in SICAM TOOLBOX II (All versions \u003c V07.10). Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation.","status":"published","published":"2023-08-08T12:30:19Z","modified":"2024-04-04T06:37:57Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:56:44.329928Z"}],"nvd":[{"id":"CVE-2022-39062","description":"A vulnerability has been identified in SICAM TOOLBOX II (All versions \u003c V07.10). Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation.","status":"published","published":"2023-08-08T10:15:12.657Z","modified":"2026-06-17T04:57:31.543Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:07:39.811118Z"}]}}