← Database

CVE-2022-40264

MEDIUM CVSS: 6.3 Published: 2022-12-14 Modified: 2026-06-17

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or destroy arbitrary files by getting a legitimate user import a project package file crafted by the attacker.

Affected Platforms

Iconics Genesis64

Weakness Type

CWE-22, CWE-22

References