CVE-2022-45792 — Directory Traversal in Project File Format allows overwrite (Zip Slip)

CVE-2022-45792

Directory Traversal in Project File Format allows overwrite (Zip Slip) PUBLISHED

Description (CNA)

Project files may contain malicious contents which the software will use to create files on the filesystem. This allows directory traversal and overwriting files with the privileges of the logged-in user.

Affected (CNA)

Vendor / product	Versions
Omron / Sysmac Studio	affected 0 before 1.54.0

CWE

CWE-22

References

https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/

ADP enrichment

CVE

No English description supplied.

https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/

CISA-ADP

No English description supplied.

No references supplied.