CVE-2022-23448

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). Affected applications improperly assign permissions to critical directories and files used by the application processes. This could allow a local unprivileged attacker to achieve code execution with ADMINISTRATOR or even NT AUTHORITY/SYSTEM privileges.

• CWE-732
• CWE-732

• https://cert-portal.siemens.com/productcert/pdf/ssa-655554.pdfMitigation, Patch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-655554.pdfMitigation, Patch, Vendor Advisory

Published

Apr 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23440A use of hard-coded cryptographic key vulnerability [CWE-321…7.8
• CVE-2022-23441A use of hard-coded cryptographic key vulnerability [CWE-321…9.1
• CVE-2022-23442An improper access control vulnerability [CWE-284] in FortiO…4.3
• CVE-2022-23443An improper access control in Fortinet FortiSOAR before 7.2.…7.5
• CVE-2022-23446A improper control of a resource through its lifetime in For…4.4
• CVE-2022-23447An improper limitation of a pathname to a restricted directo…7.5
• CVE-2022-23449A vulnerability has been identified in SIMATIC Energy Manage…7.3
• CVE-2022-2345Use After Free in GitHub repository vim/vim prior to 9.0.004…7.8
• CVE-2022-23450A vulnerability has been identified in SIMATIC Energy Manage…9.8
• CVE-2022-23451An authorization flaw was found in openstack-barbican. The d…8.1
• CVE-2022-23452An authorization flaw was found in openstack-barbican, where…4.9
• CVE-2022-23453Potential security vulnerabilities have been identified in H…7.8