InTouch Access Anywhere vulnerabilities

2 known vulnerabilities in InTouch Access Anywhere from AVEVA. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  InTouch Access Anywhere: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-23854Dec 23, 2022AVEVAEPSS 49.7%

  AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server.

• 9.9 Critical severity

  AVEVA InTouch Access Anywhere: Exposure of Resource to Wrong Sphere

  CVE-2022-1467May 23, 2022AVEVA

  Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applic