SB2022082610 - Multiple vulnerabilities in AVEVA Edge

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2022082610

SB2022082610 - Multiple vulnerabilities in AVEVA Edge

Published: August 26, 2022

Security Bulletin ID SB2022082610
Severity
High
Patch available
YES
Number of vulnerabilities 6
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 50% Medium 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 6 secuirty vulnerabilities.


1) Insufficient UI Warning of Dangerous Operations (CVE-ID: CVE-2022-36970)

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to the user interface fails to provide sufficient indication of the hazard. A remote attacker can trick a victim to open a specially crafted APP file and execute arbitrary code on the target system.


2) Deserialization of Untrusted Data (CVE-ID: CVE-2022-28685)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to insecure input validation when processing serialized data. A remote attacker can trick a victim to open a specially crafted APP file and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


3) Insecure DLL loading (CVE-ID: CVE-2022-28686)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to the application loads DLL libraries in an insecure manner. A remote user can place a specially crafted .dll file, trick the victim into opening a APP file and execute arbitrary code on victim's system.


4) Insecure DLL loading (CVE-ID: CVE-2022-28687)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to the application loads DLL libraries in an insecure manner. A remote user can place a specially crafted .dll file, trick the victim into opening a APP file and execute arbitrary code on victim's system.


5) Insecure DLL loading (CVE-ID: CVE-2022-28688)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to the application loads DLL libraries in an insecure manner. A remote user can place a specially crafted .dll file, trick the victim into opening a APP file and execute arbitrary code on victim's system.


6) XML External Entity injection (CVE-ID: CVE-2022-36969)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to insufficient validation of user-supplied XML input within the LoadImportedLibraries method. A remote attacker can trick a victim to open a specially crafted file and view contents of arbitrary files on the system or perform a denial of service (DoS) attack.


Remediation

Install update from vendor's website.

References