CVE-2022-39182
Assigner: INCD
Published: 2023-01-12T00:00:00
State: PUBLISHED
title: H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation
descriptions: value: H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation.Version 1.6 is vulnerable to privilege escalation which may allow a malicious actor to gain system privileges.
affected: vendor: H C Mingham-Smith Ltd
product: Tardis 2000
versions: version: 1.7
status: affected
lessThan: 1.6*
versionType: custom
credits: value: Yuval Dan - OTORIO
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
attackVector: ADJACENT_NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 4.9
baseSeverity: MEDIUM
problemTypes: descriptions: type: text
description: Privilege escalation
x_generator: engine: Vulnogram 0.0.9
source: defect: ILVN-2022-0063
discovery: UNKNOWN
solutions: value: Product is EOS. Limit access to the machine/service to authorized users only, or select a modern replacement.