PT-2026-2403 · Cyclades · Cyclades Serial Console Server

Published 2026-01-13 · Updated 2026-01-14 · CVE-2022-50927

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cyclades Serial Console Server version 3.3.0

Description The Cyclades Serial Console Server version 3.3.0 has a local privilege escalation issue. This is due to overly permissive sudo privileges granted to the admin user and the admin group. An attacker can exploit the default user configuration to obtain root access by manipulating system binaries and leveraging unrestricted sudo permissions.

Recommendations Apply necessary restrictions to the sudo privileges for the admin user and admin group.

Exploit

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2022-50927

Affected Products

Cyclades Serial Console Server

References · 5

• 🔥 https://exploit-db.com/exploits/50773 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50927 · Security Note
• https://twitter.com/CVEnew/status/2011383058763600159 · Twitter Post
• https://vertiv.com/en-us · Note
• https://vulncheck.com/advisories/cyclades-serial-console-server-local-privilege-escalation · Note