Description
RONDS EPM version 1.19.5 does not properly validate the filename
parameter, which could allow an unauthorized user to specify file paths
and download files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| RONDS | Equipment Predictive Maintenance Solution | 1.19.5 | — |
Advisories 1
- ICSA-23-012-02 RONDS Equipment Predictive Maintenance Solution CISA ICS & IT advisories · Jan 12, 2023