CVE-2022-2893

—

CVSS 3.1

6.5 medium

EPSS

<1%p51

Published

Jan 17, 2023 (Jan 17, 2023)

Modified

Jun 17, 2026

Description

RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized user to specify file paths and download files.

Vendors: ronds
Products: equipment predictive maintenance
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.