CyberRota Analysis
AI-GeneratedA local privilege escalation vulnerability in the Restricted Access (Kiosk) Mode of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5 allows authenticated low-privileged users to escape the kiosk environment by exploiting the external PDF viewer's print functionality. This exploitation can lead to the execution of arbitrary commands with local administrator privileges, posing significant risks to system integrity. Organizations using affected versions of this software should prioritize remediation to prevent potential unauthorized access and control over their systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnerability affects the external PDF viewer functionality used to display the application manual and its interaction with the underlying Windows operating system. An authenticated low-privileged user can escape the kiosk environment by opening the application manual in the external PDF viewer and abusing the print functionality. Successful exploitation allows execution of arbitrary commands outside the kiosk environment with local administrator privileges.