4 matches found
CVE-2022-2893
RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized user to specify file paths and download files...
6.5CVSS5.8AI score0.00701EPSS
SaveExploits0References1
CVE-2022-2893
RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized user to specify file paths and download files...
8.2CVSS8.3AI score0.00701EPSS
SaveExploits0References1
CVE-2022-2893
RONDS EPM v1.19.5 contains a path traversal vulnerability where the filename parameter is not properly validated, allowing an unauthorized user to specify file paths and download files. The issue is explicitly CVE-2022-2893; CISA ICS advisories also describe an adjacent exposure vulnerability (CV...
8.2CVSS6.4AI score0.00701EPSS
SaveExploits0References1Affected Software1
20