CVE-2022-2897CWE-59

Measuresoft ScadaPro Server and Client Link Following

High · published August 31, 2022

CVSS v3.1

7.8

EPSS

Percentile

21.2

In the wild

Unconfirmed

What it is

Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow privilege escalation..

The record

Technical detail

CVSS v3.1: 7.8 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00297 · 21.2th percentile
Weakness: CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published: 2022-08-31T20:54Z

EPSS history

Timeline