Skip to content
OpenAdvisories
High ICSA-22-130-05 1 CVE

AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere

Published May 10, 2022 · Updated May 10, 2022

Vendor: AVEVA Product: AVEVA InTouch Access Anywhere Product: AVEVA Plant SCADA Access Anywhere (formerly known as AVEVA Citect Anywhere and Schneider Electric Citect Anywhere)

Summary

Successful exploitation of this vulnerability could allow an authenticated user to escape from the context of the streamed application into the OS and launch arbitrary OS commands.

Vulnerabilities 1

  • High 7.4
    CVE-2022-1467

    AVEVA InTouch Access Anywhere Exposure of Resource to Wrong Sphere

    Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere appli…

    AVEVA AVEVA Plant SCADA Access Anywhere AVEVA InTouch Access Anywhere

Revision history

  1. #1

    ICSA-22-130-05 AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere

References