CVE-2022-24312

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior

Description A vulnerability exists that could cause modification of an existing file by adding to the end of the file or create a new file in the context of the Data Server, potentially leading to remote code execution when an attacker sends a specially crafted message. This issue is due to improper limitation of a pathname to a restricted directory.

Recommendations For versions V15.0.0.22020 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.