An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers. The server chooses which files/directories are sent to the client. However, the rsync client performs insufficient validation of file names. A malicious rsync server (or Man-in-The- Middle attacker) can overwrite arbitrary files in the rsync client target directory and subdirectories (for example, overwrite the .ssh/authorized_keys file).

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Detections

Analytics

ABB M2M Gateway Arbitrary File Write in embedded Rsync (CVE-2022-29154)

high Tenable OT Security Plugin ID 503264

Version 1.2

Version 1.1

Version 1.2 Feb 14, 2026, 5:17 PM Plugin metadata (Add icsa link and solution) Plugin Feed: 202602141717
Version 1.1 May 28, 2025, 9:47 AM New Plugin Feed: 202505280947