CVE-2022-1261

 

Published at: - 26-05-2022 07:15

Last modified: - 08-06-2022 03:25

Total changes: - 2

Description

Matrikon, a subsidary of Honeywell Matrikon OPC Server (all versions) is vulnerable to a condition where a low privileged user allowed to connect to the OPC server to use the functions of the IPersisFile to execute operating system processes with system-level privileges.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-144-02

 

Keywords

NVD

 

CVE-2022-1261

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures