CVE-2022-0902

CVE-2022-0902 affects ABB Totalflow flow computers and remote controllers (RMC-100 Standard/LITE, XIO, XFCG5, XRCG5, uFLOG5, UDC). The issue combines path traversal and command-injection vulnerabilities in the proprietary Totalflow TCP protocol, allowing a remote attacker to insert and run arbitr...