CVE-2024-22096CWE-23

Relative Path Traversal in Rapid SCADA

Medium · published February 1, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00589 · 47.4th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2024-02-01T23:15Z
EPSS history
Timeline
  • 01 FEB 23:15Z
    Relative Path Traversal in Rapid SCADA
    cvelistv5