CVE-2022-29509

HIGH

T&D Data Server < 2.22 (Japanese) and < 2.30 (English) and THERMO RECORDER DATA SERVER < 2.13 - Path Traversal

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in T&D Data Server (Japanese Edition) Ver.2.22 and earlier, T&D Data Server (English Edition) Ver.2.30 and earlier, THERMO RECORDER DATA SERVER (Japanese Edition) Ver.2.13 and earlier, and THERMO RECORDER DATA SERVER (English Edition) Ver.2.13 and earlier allows a remote attacker to view an arbitrary file on the server via unspecified vectors.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
https://tandd.com/news/detail.html?id=696
Vendor Advisory x_refsource_misc
https://www.tandd.co.jp/news/detail.html?id=522
Third Party Advisory, VDB Entry x_refsource_misc
https://jvn.jp/en/jp/JVN28659051/index.html

Scores

CVSS v3 7.5
EPSS 0.0316
EPSS Percentile 86.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-22
Status published
Products (3)
tandd/t\&d_server < 2.22
tandd/t\&d_server < 2.30
tandd/thermo_recorder_data_server_firmware < 2.13 (2 CPE variants)
Published Jun 14, 2022
Tracked Since Feb 18, 2026