CWE-250: Execution with Unnecessary Privileges
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Also known as Excessive Agency.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- hashgraph guardian, nozomi networks cmc +1 morePrivilege escalation in Guardian/CMC before 24.6.07.3 High
- pcman ftp server, wftpserver wing ftp server +1 moreWing FTP Server Lua Admin Console unnecessary privileges7.5 High
- ibm iIBM i privilege escalation8.5 High
- mitsubishi electric corporation analytix, bizviz, genesis +7 more +9 moreInformation Tampering Vulnerability in Multiple Services of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, GENESIS, GENESIS32, and BizViz6.5 Medium
- ibm storage scaleIBM Storage Scale command injection7.5 High
- brightsign os series 4 players, os series 5 players +1 moreBrightSign Players Execution with Unnecessary Privileges8.5 High
- tesla model s, model s firmware +1 moreTesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability7.0 High
- ribbon communications apollo 9608Ribbon Communications - CWE-250: Execution with Unnecessary Privileges8.0 High
- ribbon communications apollo 9608Ribbon Communications - CWE-250: Execution with Unnecessary Privileges8.0 High
- ibm hardware management console - power systems, hardware management console +1 moreIBM Hardware Management Console - Power Systems command execution8.4 High
- step-security harden-runnerHarden-Runner Evasion of 'disable-sudo' policy6.0 Medium
- argoproj argo-eventsUsers can gain privileged access to the host system and cluster with EventSource and Sensor CR10.0 Critical
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect uwp app +2 moreGlobalProtect App: Local Privilege Escalation (PE) Vulnerability7.1 High
- sonicwall netextenderA local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit)...7.2 High
- sonicwall netextenderAn improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64...7.2 High
- hgiga powerstationHGiga PowerStation - Chroot Escape6.7 Medium
- valmet dnaValmet DNA Local privilege escalation through insecure DCOM configuration8.9 High
- langgenius dify, langgenius/dify +1 morePrivilege Escalation in langgenius/dify4.3 Medium
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an...8.8 High
- mennekes smart / premium charging stationsMennekes smart/premium charges systems, Command injection in firmware upgrade8.7 High
- mennekes smart / premium charging stationsMennekes smart/premium charges systems, Command injection in sCU firmware update8.7 High
- mennekes smart / premium charging stationsMennekes smart/premium charges systems, Command injection in time setting8.7 High
- google androidIn multiple locations, there is a possible way to overlay the installation confirmation dialog...7.8 High
- google androidIn multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted...7.8 High
- google androidIn main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code....8.8 High
- broadcom brocade sannav, brocade sannav +1 moreDocker implementation in Brocade SANnav is missing Audit Rules.8.6 High
- gitlabExecution with Unnecessary Privileges in GitLab9.6 Critical
- gitlabExecution with Unnecessary Privileges in GitLab4.4 Medium
- lenovo vantageAn improper privilege vulnerability was reported in a BIOS customization feature of Lenovo...8.5 High
- amd epyc™ 7002 processors, epyc™ embedded 7002 processors, ryzen™ threadripper™ pro 3000wx series processors +2 more +4 moreSMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to...8.2 High
- humming heads inc. defense platform home edition, hummingheads defense platform +1 moreExecution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x...6.5 Medium
- ibm security verify access appliance, security verify access +1 moreIBM Security Verify Access Appliance Privilege Escalation7.8 High
- cisco asyncos, secure email, secure email and web manager +1 more +3 moreCisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability3.4 Low
- ibm aspera faspexIBM Aspera Faspex improper access control4.4 Medium
- apache solrApache Solr: Core-creation with "trusted" configset can use arbitrary untrusted files5.5 Medium
- iocharger firmware for ac modelsAuthenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station9.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station9.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station9.3 Critical
- iocharger firmware for ac chargersAuthenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station9.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection via <redacted>.exe <redacted> parameter9.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection via <redacted>.exe <redacted> parameter9.3 Critical
- iocharger firmware for ac modelsAny authenticated users can execute OS commands as root using the <redacted>.sh CGI script.9.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station9.3 Critical
- dell nativeedge, nativeedge orchestrator +1 moreDell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges...7.8 High
- ibm security verify access dockerIBM Security Verify Access privilege escalation7.8 High
- ibm storage scaleIBM Storage Scale privilege escalation7.8 High
- image access gmbh scan2netViolation of Least Privilege Principle6.1 Medium
- image access gmbh scan2netPrivilege escalation through sudo misconfiguration8.8 High
- ibm security verify accessIBM Security Verify Access Appliance privilege escalation7.8 High
- microfocus imanagerPossible Local Privilege Escalation Vulnerability in OpenText iManager5.5 Medium
- Show moreLoading…