CVE-2021-22804CWE-22

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure of arbitrary files being read in the…

published February 11, 2022

CVSS
—
EPSS
1%
Percentile
70.1
In the wild
Unconfirmed
What it is

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure of arbitrary files being read in the context of the user running IGSS, due to missing validation of user supplied data in network messages. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01294 · 70.1th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2022-02-11T17:40Z
EPSS history
Timeline
  • 11 FEB 17:40Z
    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure of arbitrary files being read in the…
    cvelistv5