CVE-2022-45792

Project files may contain malicious contents which the software will use to create files on the filesystem. This allows directory traversal and overwriting files with the privileges of the logged-in user.

Score

CVSS 3.1 7.8 High

Status

Modified - ot-cert@dragos.com

Published

2024-01-22

Last modified

2025-06-17

Weaknesses

CWE-22

Affected products

• Sysmac Studio (Omron)

References

• https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/