CVE-2022-45793 Executable files writable by low-privileged users in Omron Sysmac Studio
A local attacker can overwrite writable executables to execute arbitrary code with higher privileges in Omron Sysmac Studio.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-45793?
CVE-2022-45793 is a medium-severity vulnerability in Omron Sysmac Studio, published on 10 Jan 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which will result in code execution with privileges of a different user.
Weakness: CWE-276
Which versions are affected by CVE-2022-45793?
It affects 1 product.
Products include Omron Automation Software Sysmac Studio.
How do I fix CVE-2022-45793?
No fix has been published for CVE-2022-45793 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-45793 being exploited?
There is no known exploitation of CVE-2022-45793 in the wild and no public exploit code.
Sources
Also known as GHSA-vpjj-rc94-827v.