VULNERABILITY INTELLIGENCE

CVE-2022-22521

CVSS score7.3 HIGH

EPSS probability0.53%

CISA KEVNot currently listed

Published2022-04-27

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin.

Weakness classification

info@cert.vde.com: CWE-732
nvd@nist.gov: CWE-732

Primary references

info@cert.vde.com — Exploit, Patch, Third Party Advisory, VDB Entry
info@cert.vde.com — Exploit, Mailing List, Patch, Third Party Advisory
info@cert.vde.com — Mitigation, Third Party Advisory
info@cert.vde.com — Patch, Product, Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Product, Release Notes, Vendor Advisory