CVE-2024-47783

A vulnerability has been identified in SIPORT (All versions < V3.4.0). The affected application improperly assigns file permissions to installation folders. This could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated privileges.

Score

CVSS 4.0 8.5 High

Status

Analyzed - productcert@siemens.com

Published

2024-11-12

Last modified

2024-11-12

Weaknesses

CWE-732

Affected products

• Siport (Siemens)
• Siport Mp (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-064257.html