Medium ICSA-22-347-01 1 CVE

ICONICS and Mitsubishi Electric Products

Published Dec 13, 2022 · Updated Dec 13, 2022

Vendor: ICONICS, Mitsubishi Electric Product: ICONICS Product Suite Product: ICONICS Suite including GENESIS64, Hyper Historian, AnalytiX, and MobileHMI

Summary

Successful exploitation of this vulnerability could allow an attacker to write arbitrary files.

Vulnerabilities 1

Medium 6.3

CVE-2022-40264

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Elec…

ICONICS and Mitsubishi Electric GENESIS64

Dec 13, 2022

Revision history

2022-12-13 #1
Publication Date

References

ICS Advisory ICSA-22-347-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-347-01
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf