CVE-2022-2893 — RONDS / Equipment Predictive Maintenance Solution

CVE-2022-2893

RONDS / Equipment Predictive Maintenance Solution PUBLISHED

Description (CNA)

RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized user to specify file paths and download files.

Affected (CNA)

Vendor / product	Versions
RONDS / Equipment Predictive Maintenance Solution	affected 1.19.5

CWE

CWE-22

References

https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-02

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-02

CISA-ADP

No English description supplied.

No references supplied.