#VU69480 Improper Privilege Management in Moxa products - CVE-2022-3088

Vulnerability identifier: #VU69480

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2022-3088

CWE-ID: CWE-269

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
UC-8100A-ME-T
UC-2100
UC-2100-W
UC-3100
UC-5100
UC-8100
UC-8100-ME-T
UC-8200
AIG-300
UC-8410A
UC-8580
UC-8540
DA-662C-16-LX

Software vendor:
Moxa

The vulnerability allows a local user to escalate privileges.

The vulnerability exists due to improper privilege management. A local user can escalate privileges.

Install updates from vendor's website.

• https://www.moxa.com/en/support/product-support/security-advisory/arm-based-computer-improper-privilege-management-vulnerability