1. Home
  2. CVE Database
  3. CVE-2022-34836
MEDIUM · 5.9

CVE-2022-34836

Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and e.g., flood the log entries. An attacker who succ...

Vulnerability Description

Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and e.g., flood the log entries. An attacker who successfully exploit the vulnerability could access the Zenon runtime activities such as the start and stop of various activity and the last error code etc.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
AbbZenon<= 8.20

Related Weaknesses (CWE)

CWE-22CWE-23

References

FAQ

What is CVE-2022-34836?

CVE-2022-34836 is a vulnerability with a CVSS score of 5.9 (MEDIUM). Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and e.g., flood the log entries. An attacker who succ...

How severe is CVE-2022-34836?

CVE-2022-34836 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-34836?

Check the references section above for vendor advisories and patch information. Affected products include: Abb Zenon.