Aveva Intouch Access Anywhere vulnerabilities

2 CVEs affecting Aveva Intouch Access Anywhere, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-23854, published 2022-12-23.

More from Aveva.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-23854, published 2022-12-23. High severity, CVSS 7.5. EPSS: 46.9% chance of exploitation in the next 30 days. AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of…
• CVE-2022-1467, published 2022-05-23. Critical severity, CVSS 9.9. EPSS: 1% chance of exploitation in the next 30 days. Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA…