CVE-2026-30512

A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnerability affects the external PDF viewer functionality used to display the application manual and its interaction with the underlying Windows operating system. An authenticated low-privileged user can escape the kiosk environment by opening the application manual in the external PDF viewer and abusing the print functionality. Successful exploitation allows execution of arbitrary commands outside the kiosk environment with local administrator privileges.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://gist.github.com/dreizehnutters/8e0d24c6badce6b3a106aade15eeef4c
https://www.tuv.com/landingpage/de/schwachstelle/

Configurations

No configuration.

History

14 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de escalada de privilegios local existe en la implementación del Modo de Acceso Restringido (Kiosco) de Scheidt & Bachmann entervo HMI anterior a V2 R5 P0 M5. La vulnerabilidad afecta la funcionalidad del visor de PDF externo utilizada para mostrar el manual de la aplicación y su interacción con el sistema operativo Windows subyacente. Un usuario autenticado con bajos privilegios puede escapar del entorno del kiosco abriendo el manual de la aplicación en el visor de PDF externo y abusando de la funcionalidad de impresión. La explotación exitosa permite la ejecución de comandos arbitrarios fuera del entorno del kiosco con privilegios de administrador local.

Information

Published : 2026-08-24 14:16

Updated : 2026-10-14 13:10

NVD link : CVE-2026-30512

Mitre link : CVE-2026-30512

CVE.ORG link : CVE-2026-30512

JSON object : View

Products Affected

No product.

CWE

CWE-250

Execution with Unnecessary Privileges

{"id": "CVE-2026-30512", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-30512", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-25T19:46:04.339870Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-08-24T14:16:53.453", "references": [{"url": "https://gist.github.com/dreizehnutters/8e0d24c6badce6b3a106aade15eeef4c", "source": "cve@mitre.org"}, {"url": "https://www.tuv.com/landingpage/de/schwachstelle/", "source": "cve@mitre.org"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-250"}]}], "descriptions": [{"lang": "en", "value": "A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnerability affects the external PDF viewer functionality used to display the application manual and its interaction with the underlying Windows operating system. An authenticated low-privileged user can escape the kiosk environment by opening the application manual in the external PDF viewer and abusing the print functionality. Successful exploitation allows execution of arbitrary commands outside the kiosk environment with local administrator privileges."}, {"lang": "es", "value": "Una vulnerabilidad de escalada de privilegios local existe en la implementaci\u00f3n del Modo de Acceso Restringido (Kiosco) de Scheidt & Bachmann entervo HMI anterior a V2 R5 P0 M5. La vulnerabilidad afecta la funcionalidad del visor de PDF externo utilizada para mostrar el manual de la aplicaci\u00f3n y su interacci\u00f3n con el sistema operativo Windows subyacente. Un usuario autenticado con bajos privilegios puede escapar del entorno del kiosco abriendo el manual de la aplicaci\u00f3n en el visor de PDF externo y abusando de la funcionalidad de impresi\u00f3n. La explotaci\u00f3n exitosa permite la ejecuci\u00f3n de comandos arbitrarios fuera del entorno del kiosco con privilegios de administrador local."}], "lastModified": "2026-10-14T13:10:00.187", "sourceIdentifier": "cve@mitre.org"}