CVE-2022-2332 MEDIUM

CVE-2022-2332: Honeywell SoftMaster Incorrect Permission Assignment for Critical Resource

Vendor Honeywell
Product SoftMaster
Weakness CWE-732
Published September 16, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

6.2/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

A local unprivileged attacker may escalate to administrator privileges in Honeywell SoftMaster version 4.51, due to insecure permission assignment.

Key dates

02Disclosure timeline

September 16, 2022 CVE published
April 16, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-50590 CVE-2026-41288 WatchGuard Agent on Windows Privilege Escalation Vulnerability CVE-2026-6842 Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions CVE-2026-0271 Prisma Access Agent: Local Privilege Escalation by Authorized Users CVE-2026-8612 WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution