CVE-2022-36970: AVEVA Edge APP File Insufficient UI Warning Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build: 4201.2111.1802.0000 Service Pack 2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of APP files. Crafted data in a APP file can cause the application to execute arbitrary Visual Basic scripts. The user interface fails to provide sufficient indication of the hazard. An attacker can leverage this vulnerability to execute code in the context of current process. Was ZDI-CAN-17370.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of APP files. Crafted data in a APP file can cause the application to execute arbitrary Visual Basic scripts. The user interface fails to provide sufficient indication of the hazard. An attacker can leverage this vulnerability to execute code in the context of current process.
— ZDI
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-36970?
CVE-2022-36970 is a vulnerability that allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build: 4201.2111.1802.0000 Service Pack 2.
How does CVE-2022-36970 work?
CVE-2022-36970 requires user interaction, such as visiting a malicious page or opening a malicious file, to exploit the vulnerability and execute arbitrary code.
What is the severity of CVE-2022-36970?
The severity of CVE-2022-36970 is high, with a CVSS score of 7.8.
What is the affected software for CVE-2022-36970?
The affected software for CVE-2022-36970 includes AVEVA Edge 20.0 Build: 4201.2111.1802.0000 Service Pack 2.
How can I fix CVE-2022-36970?
To fix CVE-2022-36970, it is recommended to apply the necessary security updates provided by AVEVA. Refer to the vendor's security bulletin for more information.