Read the docs
TI-2022-01341 Aliases CVE-2022-1467GHSA-2hvg-pfw9-r56c

AVEVA InTouch Access Anywhere Exposure of Resource to Wrong Sphere

Priority MEDIUM 44CWE-668Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00983 62nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AVEVAAVEVA InTouch Access Anywhereall—No fix listedCNA
AVEVAAVEVA Plant SCADA Access Anywhereall—No fix listedCNA
  • AVEVA InTouch Access Anywhere VendorAVEVA Affected all Fixed in — No fix listed CNA
  • AVEVA Plant SCADA Access Anywhere VendorAVEVA Affected all Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:aveva:intouch_access_anywhere:*:*:*:*:*:*:*:*all versionsVulnerableAVEVA
cpe:2.3:a:aveva:plant_scada_access_anywhere:*:*:*:*:*:*:*:*all versionsVulnerableAVEVA
  • cpe:2.3:a:aveva:intouch_access_anywhere:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·AVEVA
  • cpe:2.3:a:aveva:plant_scada_access_anywhere:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·AVEVA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-1467
  2. 2026-10-03 Alias added: GHSA-2hvg-pfw9-r56c

References

Advisory 2

  • TI-2022-07857 Path traversal in AVEVA InTouch Access Anywhere CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences