Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.4

SigTest before 6.1.10 allows unauthorized access escalation

CVE-2025-22391 · published 11 months ago
Summary

Some versions of SigTest have a security flaw that allows an attacker to gain more access than they should have, potentially leading to unauthorized system access and data breaches, if an attacker with a user account interacts with the system in a specific way. This affects the confidentiality, integrity, and availability of the system, but the impact is limited to the specific system and requires a complex attack.

Original advisory text
Improper access control for some SigTest before version 6.1.10 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user comb...
Improper access control for some SigTest before version 6.1.10 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
5.4 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-284Improper Access Control
Timeline
Published11 Nov 2025
Updated13 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-22391 · NVD
Track software like this
Free during beta