Search/CVE-2024-22042
● CVE — High

CVE-2024-22042

VendorsiemensProductunicam fxDiscoveredFeb 13, 2024UpdatedDec 16, 2024

A vulnerability has been identified in Unicam FX (All versions). The windows installer agent used in affected product contains incorrect use of privileged APIs that trigger the Windows Console Host (conhost.exe) as a child process with SYSTEM privileges. This could be exploited by an attacker to perform a local privilege escalation attack.

CVSS v3.1
7.8 HIGH
EPSS
0.15%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
2 relationships
Timeline
disclosure → media coverage
Feb 13, 2024
Disclosure — published as a CVE record. · last revised by NVD Dec 16, 2024