CVE-2022-2332: Honeywell SoftMaster Incorrect Permission Assignment for Critical Resource
First published: Tue Sep 13 2022(Updated: )
A local unprivileged attacker may escalate to administrator privileges in Honeywell SoftMaster version 4.51, due to insecure permission assignment.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Honeywell SoftMaster | =4.51 | |
| Honeywell SoftMaster: version 4.51 |
Remedy
Honeywell has released firmware update packages for the affected products on their website. More information can be found in the Honeywell Security Notification SN2022-08-31 01 SoftMaster-R4.7
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID of this security issue is CVE-2022-2332.
What is the severity of CVE-2022-2332?
The severity of CVE-2022-2332 is high, with a severity value of 7.8.
Which version of Honeywell SoftMaster is affected by CVE-2022-2332?
Honeywell SoftMaster version 4.51 is affected by CVE-2022-2332.
How can an unprivileged attacker escalate to administrator privileges with CVE-2022-2332?
An unprivileged attacker can escalate to administrator privileges in Honeywell SoftMaster version 4.51 due to insecure permission assignment.
Are there any references or additional resources for CVE-2022-2332?
Yes, you can find more information about CVE-2022-2332 in the following references: [link1](https://www.cisa.gov/uscert/ics/advisories/icsa-22-256-02), [link2](https://www.security.honeywell.com/-/media/Security/Resources/PDF/Product-Warranty/Security_Notification_SN_2019-09-13-02_V4-pdf.pdf).
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/remedy
- agent/author
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/severity
- agent/references
- agent/softwarecombine
- agent/tags
- agent/event
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- vendor/honeywell
- canonical/honeywell softmaster
- version/honeywell softmaster/4.51
- canonical/honeywell softmaster: version 4.51