ICSA-22-249-02

icsaUScisa_csaf_ot

AVEVA Edge 2020 R2 SP1 and all prior versions

view advisory published 2022-09-06

Successful exploitation of these vulnerabilities could result in arbitrary code execution, information disclosure, or denial of service.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2022-36970UShigh7.8—
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build: 4201.2111.1802.0000 Service Pack 2. User interaction is req…
CVE-2022-36969UShigh7.1—
This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is requ…
CVE-2022-28688UShigh7.8—
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to…
CVE-2022-28687UShigh7.8—
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to…
CVE-2022-28686UShigh7.8—
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to…
CVE-2022-28685UShigh7.8—
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to…
02

references

External citations — patches, advisories, analysis.

03

remediations (12)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan