{"id":"CVE-2022-29509","aliases":["EUVD-2022-33846","GHSA-7g43-rvqw-4xwg"],"status":"published","title":"Directory traversal vulnerability in T\u0026D Data Server (Japanese Edition) Ver.2.22 and earlier, T\u0026D...","description":"Directory traversal vulnerability in T\u0026D Data Server (Japanese Edition) Ver.2.22 and earlier, T\u0026D Data Server (English Edition) Ver.2.30 and earlier, THERMO RECORDER DATA SERVER (Japanese Edition) Ver.2.13 and earlier, and THERMO RECORDER DATA SERVER (English Edition) Ver.2.13 and earlier allows a remote attacker to view an arbitrary file on the server via unspecified vectors.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03537,"percentile":0.89361,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2022-06-14T07:05:42Z","modified":"2026-06-17T04:40:20Z","products":[{"vendor":"t\u0026d corporation","product":"t\u0026d data server and thermo recorder data server"},{"vendor":"tandd","product":"t\\\u0026d_server"},{"vendor":"tandd","product":"thermo_recorder_data_server_firmware"}],"references":[{"url":"https://tandd.com/news/detail.html?id=696","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://www.tandd.co.jp/news/detail.html?id=522","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://jvn.jp/en/jp/JVN28659051/index.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29509"},{"url":"https://github.com/advisories/GHSA-7g43-rvqw-4xwg"}],"sources":{"cve":[{"id":"CVE-2022-29509","description":"Directory traversal vulnerability in T\u0026D Data Server (Japanese Edition) Ver.2.22 and earlier, T\u0026D Data Server (English Edition) Ver.2.30 and earlier, THERMO RECORDER DATA SERVER (Japanese Edition) Ver.2.13 and earlier, and THERMO RECORDER DATA SERVER (English Edition) Ver.2.13 and earlier allows a remote attacker to view an arbitrary file on the server via unspecified vectors.","status":"published","published":"2022-06-14T07:05:42Z","modified":"2024-08-03T06:26:05.979Z","updated_at":"2026-11-02T14:34:36.270817Z"}],"euvd":[{"id":"EUVD-2022-33846","description":"Directory traversal vulnerability in T\u0026D Data Server (Japanese Edition) Ver.2.22 and earlier, T\u0026D Data Server (English Edition) Ver.2.30 and earlier, THERMO RECORDER DATA SERVER (Japanese Edition) Ver.2.13 and earlier, and THERMO RECORDER DATA SERVER (English Edition) Ver.2.13 and earlier allows a remote attacker to view an arbitrary file on the server via unspecified vectors.","status":"published","published":"2022-06-14T07:05:42Z","modified":"2024-08-03T06:26:05Z","updated_at":"2026-11-03T03:25:38.703076Z"}],"ghsa":[{"id":"GHSA-7g43-rvqw-4xwg","title":"Directory traversal vulnerability in T\u0026D Data Server (Japanese Edition) Ver.2.22 and earlier, T\u0026D...","description":"Directory traversal vulnerability in T\u0026D Data Server (Japanese Edition) Ver.2.22 and earlier, T\u0026D Data Server (English Edition) Ver.2.30 and earlier, THERMO RECORDER DATA SERVER (Japanese Edition) Ver.2.13 and earlier, and THERMO RECORDER DATA SERVER (English Edition) Ver.2.13 and earlier allows a remote attacker to view an arbitrary file on the server via unspecified vectors.","status":"published","published":"2022-06-15T00:00:24Z","modified":"2023-01-27T05:04:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:42:22.530177Z"}],"nvd":[{"id":"CVE-2022-29509","description":"Directory traversal vulnerability in T\u0026D Data Server (Japanese Edition) Ver.2.22 and earlier, T\u0026D Data Server (English Edition) Ver.2.30 and earlier, THERMO RECORDER DATA SERVER (Japanese Edition) Ver.2.13 and earlier, and THERMO RECORDER DATA SERVER (English Edition) Ver.2.13 and earlier allows a remote attacker to view an arbitrary file on the server via unspecified vectors.","status":"published","published":"2022-06-14T09:15:09.617Z","modified":"2026-06-17T04:40:20.297Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:07:22.232533Z"}]}}