CVE-2024-22178

Name of the Vulnerable Software and Affected Versions Open Automation Software OAS Platform version 19.00.0057

Description A file write issue exists in the OAS Engine Save Security Configuration functionality. This can be triggered by a specially crafted series of network requests, leading to arbitrary file creation or overwrite. An attacker can exploit this by sending a sequence of requests.

Recommendations For version 19.00.0057, consider restricting access to the Save Security Configuration functionality until a fix is available. As a temporary workaround, monitor network requests to the OAS Engine closely to detect and prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.