CVE-2022-23854

HIGH7.5

Public PoC

Description

AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected products

AVEVA / InTouch Access Anywhere0 – 2020 R2

Exploits & PoCs

nucleiAVEVA InTouch Access Anywhere Secure Gateway - Local File Inclusionby For3stCo1d

References

VENDOR_ADVISORYhttps://www.cisa.gov/uscert/ics/advisories/icsa-22-342-02
MISChttps://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2023-001_r.pdf
MISChttps://crisec.de/advisory-aveva-intouch-access-anywhere-secure-gateway-path-traversal