How severe is CVE-2022-23858?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Starwindsoftware Command_center

CVE-2022-23858

A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system account. This affects StarWind Command Center build 6003 v2.

EPSS: 0.011 (61.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Starwindsoftware Command_center — versions 2
N/a — versions n/a

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-23858?: CVE-2022-23858 is a high-severity vulnerability in Starwindsoftware Command_center. CVSS score: 8.8/10. Published 2022-01-24.
How severe is CVE-2022-23858?: High severity. CVSS v3 base score is 8.8 out of 10.