CVE-2022-42777

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: Dec 6, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-427787.8In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execut CVE-2022-427795.5In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.CVE-2022-42787.2A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been rated as critical. This issue affects some unk CVE-2022-427805.5In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.CVE-2022-427815.5In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.CVE-2022-427825.5In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.CVE-2022-427835.5In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.CVE-2022-427846.8A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All CVE-2022-427859.8Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without k CVE-2022-427865.4Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts CVE-2022-427878.8Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated CVE-2022-427885.5A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Ventura 13. A malici