What’s Vulnerable › Vulnerabilities

CVE-2022-22521: Privilege Escalation in Miele Benchmark Programming Tool

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-04-27 · updated 2026-06-17
• Weakness: CWE-732

Description

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin.

Affected products

• Miele Benchmark Programming Tool: before 1.2.72 — fixed in 1.2.72

How to fix

Upgrade to a fixed version: Miele Benchmark Programming Tool 1.2.72. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.com/files/166881/Miele-Benchmark-Programming-Tool-1.1.49-1.2.71-Privilege-Escalation.html
• http://seclists.org/fulldisclosure/2022/Apr/42
• https://cert.vde.com/en/advisories/VDE-2022-015/
• https://www.miele.de/p/miele-benchmark-programming-tool-2296.htm
• http://packetstormsecurity.com/files/166881/Miele-Benchmark-Programming-Tool-1.1.49-1.2.71-Privilege-Escalation.html
• http://seclists.org/fulldisclosure/2022/Apr/42
• https://cert.vde.com/en/advisories/VDE-2022-015/
• https://www.miele.de/p/miele-benchmark-programming-tool-2296.htm

Get alerted when CVE-2022-22521 or the next vulnerability affects your stack