Is CVE-2022-29834 actively exploited?

No active exploitation of CVE-2022-29834 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-29834 be exploited remotely?

Yes. CVE-2022-29834 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2022-29834?

CVE-2022-29834 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2022-29834

HIGH

CVE-2022-29834

CWE-22Published: July 20, 2022· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, and Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1 allows a remote unauthenticated attacker to access to arbitrary files in the GENESIS64 server or ICONICS suite server and disclose information stored in the files by embedding a malicious URL parameter in the URL of the monitoring screen delivered to the GENESIS64 or ICONICS Suite mobile monitoring application and accessing the monitoring screen.

NVD Source

Technical Analysis

CVE-2022-29834 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 7.5.