What’s Vulnerable › Vulnerabilities

CVE-2022-50927: Cyclades Serial Console Server 3.3.0 - Local Privilege Escalation

• Severity: medium (CVSS 6.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-13 · updated 2026-06-17
• Weakness: CWE-266

Description

Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin group. Attackers can exploit the default user configuration to gain root access by manipulating system binaries and leveraging unrestricted sudo permissions.

Affected products

• Vertiv Cyclades Serial Console Server: from 1.0.0 through 3.3.0

References

• https://www.exploit-db.com/exploits/50773
• https://www.vertiv.com/en-us/
• https://www.vulncheck.com/advisories/cyclades-serial-console-server-local-privilege-escalation

Get alerted when CVE-2022-50927 or the next vulnerability affects your stack