CVE-2022-50927 HIGH

CVE-2022-50927: Cyclades Serial Console Server 3.3.0 - Local Privilege Escalation

Vendor Vertiv
Product Cyclades Serial Console Server
Weakness CWE-266
Published January 13, 2026
Last update April 7, 2026
View on NVD All CVEs

CVSS base score

8.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin group. Attackers can exploit the default user configuration to gain root access by manipulating system binaries and leveraging unrestricted sudo permissions.

Key dates

02Disclosure timeline

January 13, 2026 CVE published
April 7, 2026 Record updated