CVE-2024-22042

A vulnerability has been identified in Unicam FX (All versions). The windows installer agent used in affected product contains incorrect use of privileged APIs that trigger the Windows Console Host (conhost.exe) as a child process with SYSTEM privileges. This could be exploited by an attacker to perform a local privilege escalation attack.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://cert-portal.siemens.com/productcert/html/ssa-543502.html	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:siemens:unicam_fx_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:unicam_fx:-:*:*:*:*:*:*:*

History

21 Oct 2024, 19:50

Type	Values Removed	Values Added
CPE		cpe:2.3:o:siemens:unicam_fx_firmware:::::::: cpe:2.3:h:siemens:unicam_fx:-:::::::*
First Time		Siemens unicam Fx Siemens Siemens unicam Fx Firmware
CWE		NVD-CWE-noinfo
References	~~() https://cert-portal.siemens.com/productcert/html/ssa-543502.html -~~	() https://cert-portal.siemens.com/productcert/html/ssa-543502.html - Vendor Advisory

13 Feb 2024, 09:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-02-13 09:15

Updated : 2024-10-21 19:50

NVD link : CVE-2024-22042

Mitre link : CVE-2024-22042

CVE.ORG link : CVE-2024-22042

JSON object : View

Products Affected

siemens

unicam_fx
unicam_fx_firmware

CWE

NVD-CWE-noinfo CWE-648

Incorrect Use of Privileged APIs

{"id": "CVE-2024-22042", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "productcert@siemens.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2024-02-13T09:15:47.157", "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-543502.html", "tags": ["Vendor Advisory"], "source": "productcert@siemens.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "productcert@siemens.com", "description": [{"lang": "en", "value": "CWE-648"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Unicam FX (All versions). The windows installer agent used in affected product contains incorrect use of privileged APIs that trigger the Windows Console Host (conhost.exe) as a child process with SYSTEM privileges. This could be exploited by an attacker to perform a local privilege escalation attack."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en Unicam FX (todas las versiones). El agente de instalaci\u00f3n de Windows utilizado en el producto afectado contiene un uso incorrecto de API privilegiadas que activan el host de la consola de Windows (conhost.exe) como un proceso secundario con privilegios de SYSTEMA. Un atacante podr\u00eda aprovechar esto para realizar un ataque de escalada de privilegios local."}], "lastModified": "2024-10-21T19:50:08.363", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:siemens:unicam_fx_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88AC9450-00F8-421C-86CE-91BD04BE3A24"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:siemens:unicam_fx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B2A4099D-73A3-442D-AAAE-4C499303EB75"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "productcert@siemens.com"}