CVE-2022-40264

Published: Dic 14, 2022 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2022-43562 Aliases: GSD-2022-40264
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,3
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: changed
Confidentiality: none
Integrity: high
Availability: none

Description

AI Translation Available

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or destroy arbitrary files by getting a legitimate user import a project package file crafted by the attacker.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0025
Percentile
0,5th
Updated

EPSS Score Trend (Last 91 Days)

22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Stable
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Confidentiality Availability
Potential Impacts:
Execute Unauthorized Code Or Commands Modify Files Or Directories Read Files Or Directories Dos: Crash, Exit, Or Restart
Applicable Platforms
Technologies: AI/ML
Likelihood of Exploit: High
View CWE Details
Application

Genesis64 by Iconics

Product Information
Vendor Iconics
Product Genesis64
Version Range Affected
From 10.96 (inclusive)
To 10.97.2 (inclusive)
cpe:2.3:a:iconics:genesis64:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://iconics.com/About/Security/CERT
Vendor Advisory
https://iconics.com/About/Security/CERT
https://jvn.jp/vu/JVNVU95858406/index.html
Third Party Advisory
https://jvn.jp/vu/JVNVU95858406/index.html
https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-01
Third Party Advisory US Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-01
https://www.mitsubishielectric.com/en/psirt/vulnerability/p…
Mitigation Vendor Advisory
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-014_en.pdf
https://iconics.com/About/Security/CERT
Vendor Advisory
https://iconics.com/About/Security/CERT
https://jvn.jp/vu/JVNVU95858406/index.html
Third Party Advisory
https://jvn.jp/vu/JVNVU95858406/index.html
https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-01
Third Party Advisory US Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-01
https://www.mitsubishielectric.com/en/psirt/vulnerability/p…
Mitigation Vendor Advisory
https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-014_en.pdf