ICSA-22-249-02

icsaUScisa_csaf_ot

AVEVA Edge 2020 R2 SP1 and all prior versions

Advisory ansehen veröffentlicht 2022-09-06

Successful exploitation of these vulnerabilities could result in arbitrary code execution, information disclosure, or denial of service.

01

beschreibt (6)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-36970UShigh7.8—
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build: 4201.2111.1802.0000 Service Pack 2. User interaction is req…
CVE-2022-36969UShigh7.1—
This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is requ…
CVE-2022-28688UShigh7.8—
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to…
CVE-2022-28687UShigh7.8—
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to…
CVE-2022-28686UShigh7.8—
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to…
CVE-2022-28685UShigh7.8—
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (12)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan