CVE-2022-29509

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-14 · updated 2026-06-17
Weakness: CWE-22

Description

Directory traversal vulnerability in T&D Data Server (Japanese Edition) Ver.2.22 and earlier, T&D Data Server (English Edition) Ver.2.30 and earlier, THERMO RECORDER DATA SERVER (Japanese Edition) Ver.2.13 and earlier, and THERMO RECORDER DATA SERVER (English Edition) Ver.2.13 and earlier allows a remote attacker to view an arbitrary file on the server via unspecified vectors.

Affected products

Tandd T&D Server: through 2.22; through 2.30
Tandd Thermo Recorder Data Server Firmware: through 2.13

References

https://jvn.jp/en/jp/JVN28659051/index.html
https://tandd.com/news/detail.html?id=696
https://www.tandd.co.jp/news/detail.html?id=522
https://jvn.jp/en/jp/JVN28659051/index.html
https://tandd.com/news/detail.html?id=696
https://www.tandd.co.jp/news/detail.html?id=522

Get alerted when CVE-2022-29509 or the next vulnerability affects your stack