Critical severity · published May 23, 2022
CVE-2022-1467
Windows OS can be configured to overlay a “language bar” on top of any application
9.9
CVSS
1%
EPSS
No
On KEV
Description
Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
Intouch Access Anywhere · Aveva
All versions, or not specified · source: NVD
PS
Plant Scada Access Anywhere · Aveva
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-1467
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-1467
Vendor Advisory
https://www.aveva.com/en/support-and-success/cyber-security-updates/
Third Party Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-130-05
More from Intouch Access Anywhere
7.5
CVE-2022-23854
AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on…