CVE-2022-23854CWE-23

AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network…

High · published December 23, 2022

CVSS v3.1
7.5
EPSS
47%
Percentile
98.8
In the wild
Unconfirmed
What it is

AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.46867 · 98.8th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2022-12-23T20:50Z
EPSS history
Timeline
  • 23 DEC 20:50Z
    AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network…
    cvelistv5