CVE-2022-27169

Name of the Vulnerable Software and Affected Versions Open Automation Software OAS Platform version 16.00.0112

Description An information disclosure issue exists in the OAS Engine SecureBrowseFile functionality. A specially-crafted network request can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this issue.

Recommendations For version 16.00.0112, consider restricting access to the SecureBrowseFile functionality until a patch is available. As a temporary workaround, avoid using the OAS Engine SecureBrowseFile functionality to minimize the risk of exploitation.