VDB
BDU%3A2022-02926
BDU%3A2022-02926
PUBLISHED
CVSS 6.5 MEDIUM
Уязвимость расширений для обеспечения доступа к приложениям InTouch Access Anywhere и Plant SCADA Access Anywhere, связанная с раскрытием информации в ошибочной области данных, позволяющая нарушителю выполнить произвольные команды ОС
Risk Scores
CVSS 2.0
6.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AVEVA Software, LLC | InTouch Access Anywhere, Plant SCADA Access Anywhere |
Timeline
- May 13, 2022 CVE Published
- May 17, 2022 CVE Updated
References
- https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules url
- http://www.cybersecurity-help.cz/vdb/SB2022051121 url
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-130-05 url
- https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/AVEVA-2022-001.pdf advisory
- https://docs.microsoft.com/enus/windows/security/threat-protection/windows-defender-application-control/microsoftrecommended-block-rules advisory