Intouch Access Anywhere

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-23854 Dec 23, 21:15 HIGH POC THREAT This Week

AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Intouch Access Anywhere Aveva

NVD Exploit-DB

CVSS 3.1

7.5

EPSS

46.0%

CVE-2022-1467 May 23, 20:16 CRITICAL Act Now

Windows OS can be configured to overlay a “language bar” on top of any application. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Command Injection Microsoft Intouch Access Anywhere Plant Scada Access Anywhere +1

NVD

CVSS 3.1

9.9

EPSS

0.9%

CVE-2022-23854

EPSS 46% CVSS 7.5

HIGH POC THREAT This Week

Path Traversal Intouch Access Anywhere Aveva

NVD Exploit-DB

CVE-2022-1467

EPSS 1% CVSS 9.9

CRITICAL Act Now

Information Disclosure Command Injection Microsoft +3

NVD