CVE-2022-27580 is a deserialization vulnerability in the Safety Designer software, affecting all versions up to and including 1.11.0. An attacker can craft malicious project files that, when opened or imported by a user, execute arbitrary code with the user's privileges, compromising confidentiality, integrity, and availability. This vulnerability has a CVSS score of 7.8 (High), requiring user interaction (UI:R) and local access (AV:L) for exploitation. There is currently no public exploit code available, no evidence of active exploitation, and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.11.0CPE matchmatch criteria | cpe:2.3:a:sick:safety_designer:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
SafeLogic Designer vulnerabilities
Aug 11, 2022SafeLogic Designer vulnerabilities
Aug 11, 2022SafeLogic Designer vulnerabilities
Aug 11, 2022SafeLogic Designer vulnerabilities
Aug 11, 2022