CVE-2022-41976 (scada-lts)

An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role (e.g., to administrator) by updating their user profile.

application attackers build change cve escalation issue low lts privilege privileged privileged user privilege escalation profile role scada user profile