CVE-2022-45792 - Directory Traversal in Project File Format allows overwrite (Zip Slip)

Back Back to CVE browser

HIGH

Directory Traversal in Project File Format allows overwrite (Zip Slip)

Published Jan 22, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.33%

Description

Project files may contain malicious contents which the software will use to create files on the filesystem. This allows directory traversal and overwriting files with the privileges of the logged-in user.

Affected products

Vendor Omron Product Sysmac Studio Default
unaffected
Affected
- ≥ 0, < 1.54.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Omron	Sysmac Studio	unaffected	Affected ≥ 0, < 1.54.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48648
Advisory
https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48648		Advisory
https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Dragos

Published Jan 22, 2024

Updated Jun 17, 2025

Reserved Nov 22, 2022

Link CVE-2022-45792

CISA Vulnrichment

Updated Jan 30, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-45792

Red Hat

No data

ENISA EUVD

Assigner Dragos

Published Jan 22, 2024

Updated Jun 17, 2025

Link EUVD-2022-48648

GitHub

No data