// For flags

CVE-2022-27169

 

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network request can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this vulnerability.

Se presenta una vulnerabilidad de divulgación de información en la funcionalidad OAS Engine SecureBrowseFile de Open Automation Software OAS Platform versión V16.00.0112. Una petición de red especialmente diseñada puede conllevar a una divulgación de información confidencial. Un atacante puede enviar una petición de red para desencadenar esta vulnerabilidad

*Credits: Discovered by Jared Rittle of Cisco Talos.
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-03-14 CVE Reserved
  • 2022-05-25 CVE Published
  • 2024-09-16 CVE Updated
  • 2024-09-16 First Exploit
  • 2024-12-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-306: Missing Authentication for Critical Function
CAPEC
References (1)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Openautomationsoftware
Search vendor "Openautomationsoftware"
Oas Platform
Search vendor "Openautomationsoftware" for product "Oas Platform"
16.00.0112
Search vendor "Openautomationsoftware" for product "Oas Platform" and version "16.00.0112"
-
Affected