CVE-2022-34836CWE-23

ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control

Medium · published August 24, 2022

CVSS v3.1
5.9
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and e.g., flood the log entries. An attacker who successfully exploit the vulnerability could access the Zenon runtime activities such as the start and stop of various activity and the last error code etc.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00634 · 49.7th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2022-08-24T15:15Z
EPSS history
Timeline
  • 24 AUG 15:15Z
    ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control
    cvelistv5