CVE-2022-34836
ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control
- State
- Published
- Severity
- 5.9 Medium
- Published
- Aug 24, 2022
- Updated
- Sep 17, 2024
- Reserved
- Jun 30, 2022
Description
Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and e.g., flood the log entries. An attacker who successfully exploit the vulnerability could access the Zenon runtime activities such as the start and stop of various activity and the last error code etc.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.9 Medium | CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N | ABB |
Weaknesses
- CWE-23 Relative Path Traversal
Affected Products
| Product | Versions |
|---|---|
ABB ZenonABB |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.