Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.
References
Link | Resource |
---|---|
https://www.aveva.com/en/support-and-success/cyber-security-updates/ | Vendor Advisory |
https://www.cisa.gov/uscert/ics/advisories/icsa-22-130-05 | Third Party Advisory US Government Resource |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: icscert
Published: 2022-05-23T19:17:02
Updated: 2022-05-23T19:17:02
Reserved: 2022-04-25T00:00:00
Link: CVE-2022-1467
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-05-23T20:16:40.833
Modified: 2022-06-07T03:07:23.527
Link: CVE-2022-1467
JSON object: View
Redhat Information
No data.
CWE