CVE-2022-29834

2022-07-2016:48:46

Mitsubishi

www.cve.org

0.002 Low

EPSS

Percentile

56.0%

JSON

Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in ICONICS GENESIS64 versions 10.97 to 10.97.1 allows a remote unauthenticated attacker to access to arbitrary files in the GENESIS64 server and disclose information stored in the files by embedding a malicious URL parameter in the URL of the monitoring screen delivered to the GENESIS64 mobile monitoring application and accessing the monitoring screen.

CNA Affected

[
  {
    "product": "ICONICS GENESIS64",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ICONICS GENESIS64 versions 10.97 to 10.97.1"
      }
    ]
  }
]