← Vulnerability feed

Vulnerability record · CVE-2022-1467 · published 23 May 2022

CVE-2022-1467: Aveva intouch access anywhere exposure of resource to wrong sphere vulnerability

Aveva · Intouch Access Anywhere

Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.

9.9 CVSS 3.1 Critical EPSS 0.97% · top 39.7% CWE-668 · Exposure of resource to wrong sphere
9.9CVSS 3.1 base score, v2 8.5
0.97%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.aveva.com/en/support-and-success/cyber-security-updates/ Vendor Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-130-05 Third Party AdvisoryUS Government Resource
https://www.aveva.com/en/support-and-success/cyber-security-updates/ Vendor Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-130-05 Third Party AdvisoryUS Government Resource

Track CVE-2022-1467 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2022-23854AVEVA InTouch Access Anywhere path traversal allows unauthenticated file readAVEVA InTouch Access Anywhere 2020 R2 and older contain a path traversal flaw in the secure gateway web server. An unauthenticated attacker with netw…EPSS 46%analysed

Source: NIST National Vulnerability Database (record CVE-2022-1467), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.