ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control
Vulnerability Description
Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user also can add own log messages and e.g., flood the log entries. An attacker who successfully exploit the vulnerability could access the Zenon runtime activities such as the start and stop of various activity and the last error code etc.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-34836
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- ABB thanks Ruben Santamarta for helping to identify the vulnerabilities and protecting our customers
