High severity7.5NVD Advisory· Published Dec 23, 2022· Updated Jun 17, 2026

CVE-2022-23854

Description

AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Aveva/Intouch Access Anywherecpe-rescue5 versions
0+ 4 more
- (no CPE)range: 0
- cpe:2.3:a:aveva:intouch_access_anywhere:*:*:*:*:*:*:*:*range: <2020
- cpe:2.3:a:aveva:intouch_access_anywhere:2020:-:*:*:*:*:*:*
- cpe:2.3:a:aveva:intouch_access_anywhere:2020:r2:*:*:*:*:*:*
- (no CPE)range: <=2020 R2

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-22-342-02nvdThird Party AdvisoryUS Government Resource
crisec.de/advisory-aveva-intouch-access-anywhere-secure-gateway-path-traversalnvd
www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2023-001_r.pdfnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.037
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000