CVE-2022-28687

CVE-2022-28687 is a high-severity arbitrary code execution vulnerability affecting AVEVA Edge 2020 SP2 Patch 0. It arises from the improper handling of APP files, where the software loads a library from an unsecured location. Exploitation requires user interaction, as the target must visit a malicious page or open a malicious file, allowing an attacker to execute code in the context of the current process. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.