cveboard RSS feed

CVE-2022-1467

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2022
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

AVEVA InTouch Access Anywhere Exposure of Resource to Wrong Sphere

Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

AVEVA InTouch Access Anywhere

Vendor
AVEVA
Product
AVEVA InTouch Access Anywhere
Platforms
Unknown
Default status
Unknown
AVEVA InTouch Access Anywhere · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
allaffectedUnavailableUnavailableUnavailableNone listed

AVEVA Plant SCADA Access Anywhere

Vendor
AVEVA
Product
AVEVA Plant SCADA Access Anywhere
Platforms
Unknown
Default status
Unknown
AVEVA Plant SCADA Access Anywhere · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
allaffectedUnavailableUnavailableUnavailableNone listed