In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system.
Credits
Noam Moshe of Claroty Research reported these vulnerabilities to CISA.
