Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or destroy arbitrary files by getting a legitimate user import a project package file crafted by the attacker.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ICONICS and Mitsubishi Electric | GENESIS64 | versions 10.96 to 10.97.2 | — |
Advisories 1
- ICSA-22-347-01 ICONICS and Mitsubishi Electric Products CISA ICS & IT advisories · Dec 13, 2022