CVE-2026-30512
Received Received - Intake

Privilege Escalation in Entevo HMI V2 R5 P0 M4 via Kiosk Mode Escape

Publication date: 2026-08-24

Last updated on: 2026-08-24

Assigner: MITRE

Description
A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnerability affects the external PDF viewer functionality used to display the application manual and its interaction with the underlying Windows operating system. An authenticated low-privileged user can escape the kiosk environment by opening the application manual in the external PDF viewer and abusing the print functionality. Successful exploitation allows execution of arbitrary commands outside the kiosk environment with local administrator privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-24
Last Modified
2026-08-24
Generated
2026-08-24
AI Q&A
2026-08-24
EPSS Evaluated
N/A
NVD
CVE-2026-30512
EUVD
EUVD-2026-64900

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
entevo hmi v2_r5_p0_m4
scheidt_and_bachmann entervo_hmi to 2_R5_P0_M5 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-30512 is a local privilege escalation vulnerability in Entevo HMI V2 R5 P0 M4 software. It allows authenticated users to escape Kiosk Mode by opening application manuals in an external PDF viewer and abusing the Print functionality. This grants access to Windows Explorer and enables execution of arbitrary commands with administrative privileges.

Detection Guidance

Detecting this vulnerability requires checking if the Entevo HMI software version is prior to V2 R5 P0 M5. Review installed software versions and compare against the patched release. No specific commands are provided in the context, but monitoring for unauthorized privilege escalation attempts or kiosk mode escapes may indicate exploitation.

Impact Analysis

An attacker with existing low-level access could exploit this to gain full administrative control over the system. This could lead to complete system compromise, including data theft, unauthorized modifications, or disruption of operations. The impact is limited to local exploitation as remote access is not possible.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Organizations using affected systems may face compliance violations, potential fines, and reputational damage if exploited. Immediate patching is recommended to maintain regulatory compliance.

Mitigation Strategies

Immediately update Entevo HMI to version V2 R5 P0 M5 or later. Restrict physical and remote access to authenticated users only. Disable or monitor the external PDF viewer feature in kiosk mode. Apply the vendor's recommended security patches and consider disabling kiosk mode if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-30512. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart