CVE-2022-2088 MEDIUM

CVE-2022-2088: Elcomplus SmartICS Access Control

Vendor Elcomplus
Product SmartICS
Weakness CWE-284
Published June 27, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

6.8/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

What the vulnerability does

01Description

An authenticated user with admin privileges may be able to terminate any process on the system running Elcomplus SmartICS v2.3.4.0.

Key dates

02Disclosure timeline

June 27, 2022 CVE published
April 16, 2025 Record updated