CVE-2024-22096 — Relative Path Traversal in Rapid SCADA

CVE-2024-22096

Relative Path Traversal in Rapid SCADA PUBLISHED

Description (CNA)

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system.

Affected (CNA)

Vendor / product	Versions
Rapid Software LLC / Rapid SCADA	affected 0 through 5.8.4

CWE

CWE-23

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03
https://rapidscada.org/contact/

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03
https://rapidscada.org/contact/

CISA-ADP

No English description supplied.

No references supplied.