CVE-2022-29834: Path Traversal
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS GENESIS64 versions 10.97 to 10.97.1 allows a remote unauthenticated attacker to access to arbitrary files in the GENESIS64 server and disclose information stored in the files by embedding a malicious URL parameter in the URL of the monitoring screen delivered to the GENESIS64 mobile monitoring application and accessing the monitoring screen.
Other sources
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, and Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1 allows a remote unauthenticated attacker to access to arbitrary files in the GENESIS64 server or ICONICS suite server and disclose information stored in the files by embedding a malicious URL parameter in the URL of the monitoring screen delivered to the GENESIS64 or ICONICS Suite mobile monitoring application and accessing the monitoring screen.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID CVE-2022-29834?
The vulnerability ID CVE-2022-29834 refers to an 'Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)' vulnerability in ICONICS GENESIS64 versions 10.97 to 10.97.1.
What is the severity of CVE-2022-29834?
The severity of CVE-2022-29834 is high with a CVSS score of 7.5.
How does CVE-2022-29834 impact ICONICS GENESIS64?
CVE-2022-29834 allows a remote unauthenticated attacker to access arbitrary files in the GENESIS64 server and disclose sensitive information.
How can I fix CVE-2022-29834 in ICONICS GENESIS64?
To fix CVE-2022-29834 in ICONICS GENESIS64, it is recommended to apply the necessary security patches provided by ICONICS or upgrade to a non-vulnerable version.
Where can I find more information about CVE-2022-29834?
You can find more information about CVE-2022-29834 in the following references: [https://jvn.jp/vu/JVNVU96480474/index.html](https://jvn.jp/vu/JVNVU96480474/index.html) and [https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf](https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-008_en.pdf)