CVE-2024-22096

6.5 mediumEPSS 0.6%

Medium (6.5) in rapidscada rapid scada. EPSS 0.6% chance of exploitation in the next 30 days.

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWEs: CWE-22, CWE-23
Published: 2024-02-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rapidscada:rapid_scada

References

https://rapidscada.org/contact/
https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03
https://rapidscada.org/contact/
https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03

Check your stack JSON