{"id":"CVE-2022-45793","aliases":["EUVD-2022-48649","GHSA-vpjj-rc94-827v"],"status":"published","title":"Executable files writable by low-privileged users in Omron Sysmac Studio","description":"Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which will result in code execution with privileges of a different user.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00275,"percentile":0.20175,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276"],"published":"2024-01-10T20:49:36Z","modified":"2026-06-17T05:10:44Z","products":[{"vendor":"omron","product":"automation_software_sysmac_studio"},{"vendor":"omron","product":"sysmac studio"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-262-04","tags":["x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-009_en.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45793"},{"url":"https://github.com/advisories/GHSA-vpjj-rc94-827v"}],"sources":{"cve":[{"id":"CVE-2022-45793","title":"Executable files writable by low-privileged users in Omron Sysmac Studio","description":"Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which will result in code execution with privileges of a different user.","status":"published","published":"2024-01-10T20:49:36.082Z","modified":"2025-04-17T15:42:42.58Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:34:31.519788Z"}],"euvd":[{"id":"EUVD-2022-48649","description":"Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which will result in code execution with privileges of a different user.","status":"published","published":"2024-01-10T20:49:36Z","modified":"2025-04-17T15:42:42Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:21.593744Z"}],"ghsa":[{"id":"GHSA-vpjj-rc94-827v","title":"[PROBLEMTYPE] in [VENDOR] [PRODUCT] [VERSION] on [PLATFORMS] allows [ATTACKER] to [IMPACT].","description":"[PROBLEMTYPE] in [VENDOR] [PRODUCT] [VERSION] on [PLATFORMS] allows [ATTACKER] to [IMPACT].","status":"published","published":"2024-01-10T21:31:07Z","modified":"2024-01-10T21:31:11Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:55:23.490471Z"}],"nvd":[{"id":"CVE-2022-45793","description":"Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which will result in code execution with privileges of a different user.","status":"published","published":"2024-01-10T21:15:08.193Z","modified":"2026-06-17T05:10:44.773Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:07:39.811118Z"}]}}