CVE-2022-28688

Vulnerability

A remote code execution vulnerability exists in AVEVA Edge 2020 SP2 Patch 0 (4201.2111.1802.0000) during the handling of APP files. The process loads a library from an unsecured location, enabling an attacker to inject and execute arbitrary code. User interaction is required, as the target must visit a malicious page or open a malicious file [1].

Exploitation

An attacker can exploit this vulnerability by convincing a user to open a specially crafted APP file or visit a web page that loads the malicious file. No authentication is needed, but the victim must perform the action. The attack vector is local with low complexity, and no privileges are required [1].

Impact

Successful exploitation allows the attacker to execute arbitrary code in the context of the current process, leading to full compromise of confidentiality, integrity, and availability (CVSS 7.8, AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) [1].

Mitigation

AVEVA has issued a security update. Affected users should apply the latest patch from the vendor. No workaround is documented in the available references [1].