Headline
CVE-2022-40264
Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in ICONICS/Mitsubishi Electric GENESIS64 versions 10.96 to 10.97.2 allows an unauthenticated attacker to create, tamper with or destroy arbitrary files by getting a legitimate user import a project package file crafted by the attacker.
%PDF-1.7 %���� 144 0 obj <> endobj 168 0 obj <>/Encrypt 145 0 R/Filter/FlateDecode/ID[<2AC444CFC4CA904C83568EEAD0A9059A>]/Index[144 40]/Info 143 0 R/Length 109/Prev 240154/Root 146 0 R/Size 184/Type/XRef/W[1 3 1]>>stream h�bbd```b``f�L?A$C �� "Y����`� ,&��Iq0��uG�� `r:��6�`$O��=@�{n�،`5L~@��’&�����F�g`j� `��m endstream endobj startxref 0 %%EOF 183 0 obj <>stream �d��B��A�!���x�=� s�[i��S����]RZ�T�’)fR�ѲHS>�"x�����4xs�ܐB�JuF���}ҘA���g{22�)�8YP,F��^��i0�}���U��f��ir�l� Ey��8sb���#4�Z5�쬪 -sC��� I�b�+� endstream endobj 145 0 obj <>>>/Filter/Standard/Length 256/O(��_A��\(�D� ��f���8ʝ��2�F\(�7��mU��\)�fɜ<})/OE(�j^�.�_�ġ%���#p�Џh�ټ���7��)/P -1324/Perms(�3����"�i�KI#��)/R 6/StmF/StdCF/StrF/StdCF/U(�E�����e������g�an������������5����7h�$�y)/UE(�g, c� �{S�n �,�L� �%DdH��B)/V 5>> endobj 146 0 obj <>/Metadata 7 0 R/PageLayout/OneColumn/Pages 142 0 R/StructTreeRoot 12 0 R/Type/Catalog>> endobj 147 0 obj <>/Font<>/ProcSet[/PDF/Text/ImageC]/XObject<>>>/Rotate 0/StructParents 0/Tabs/S/Type/Page>> endobj 148 0 obj <>stream ����&��Q��4��&�.���=�ӿ: �D�>� ]�vX ar<�|��?��i�+"�/�;mf� �Ct�k´JȲBN�s��4ɸ�?6ڢ��Bɮ�!�bUQ �(Cቨ�?�T�®�uN M�edΌY/m~ZX�=�UD ?O��vnsJ�� �&0� ,��SpO���������)���^�8b��*Sq���iEW� ߛ�,G���if���¦�����[Z�"���ڂQ��C��w5l$. ;�k��Xa��<�\� �^�ŕWk�֥?�X��ج3N