Path Traversal Vulnerability in ICONICS GENESIS64 by Mitsubishi Electric

CVE-2022-40264

Summary

An improper limitation of a pathname to a restricted directory vulnerability exists in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2. This flaw allows an unauthenticated attacker to exploit the system by persuading a legitimate user into importing a specially crafted project package file. If successful, the attacker can create, modify, or delete arbitrary files within the system, leading to potential unauthorized access and manipulation of critical data.

References