CVE-2022-45792 HIGH

CVE-2022-45792: Directory Traversal in Project File Format allows overwrite (Zip Slip)

Vendor Omron

Product Sysmac Studio

Weakness CWE-22 · Path traversal

Published January 22, 2024

Last update June 17, 2025

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Project files may contain malicious contents which the software will use to create files on the filesystem. This allows directory traversal and overwriting files with the privileges of the logged-in user.

Key dates

02Disclosure timeline

January 22, 2024 CVE published

June 17, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-45792 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

04Related CVE

CVE-2024-52449 WordPress WordPress Bootscraper plugin <= 2.1.0 - Local File Inclusion vulnerability CVE-2023-47624 Audiobookshelf Arbitrary File Read Vulnerability CVE-2023-32317 Autolab tar slip in cheat checker functionality (`GHSL-2023-082`) CVE-2023-43648 baserCMS Directory Traversal vulnerability in Form submission data management Feature CVE-2026-26329 OpenClaw has a path traversal in browser upload allows local file read