CVE-2022-34836 - ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control

Back Back to CVE browser

HIGH

ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control

Published Aug 24, 2022

8.2

HIGH

CVSS 3.1

EPSS 0.62%

Description

Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and e.g., flood the log entries. An attacker who successfully exploit the vulnerability could access the Zenon runtime activities such as the start and stop of various activity and the last error code etc.

Affected products

Vendor ABB Product ABB Zenon Default
unknown
Affected
- ≥ unspecified, ≤ 8.20

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
ABB	ABB Zenon	unknown	Affected ≥ unspecified, ≤ 8.20

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-22

Path Traversal

CWE-23

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-37742
Advisory
https://search.abb.com/library/Download.aspx?DocumentID=2NGA001479&LanguageCode=en&DocumentPartId=&Action=Launch
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-37742		Advisory
https://search.abb.com/library/Download.aspx?DocumentID=2NGA001479&LanguageCode=en&DocumentPartId=&Action=Launch		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ABB

Published Aug 24, 2022

Updated Sep 17, 2024

Reserved Jun 30, 2022

Link CVE-2022-34836

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-34836

Red Hat

No data

ENISA EUVD

Assigner ABB

Published Aug 24, 2022

Updated Sep 17, 2024

Link EUVD-2022-37742

GitHub

No data