Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7f2p-xwcx-975m

Опубликовано: 26 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In Indo-Sol PROFINET-INspektor NT through 2.4.0, a path traversal vulnerability in the httpuploadd service of the firmware allows remote attackers to write to arbitrary files via a crafted filename parameter in requests to the /upload endpoint.

In Indo-Sol PROFINET-INspektor NT through 2.4.0, a path traversal vulnerability in the httpuploadd service of the firmware allows remote attackers to write to arbitrary files via a crafted filename parameter in requests to the /upload endpoint.

EPSS

Процентиль: 49%
0.00255
Низкий

7.5 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 7.5
nvd
почти 2 года назад

In Indo-Sol PROFINET-INspektor NT through 2.4.0, a path traversal vulnerability in the httpuploadd service of the firmware allows remote attackers to write to arbitrary files via a crafted filename parameter in requests to the /upload endpoint.

EPSS

Процентиль: 49%
0.00255
Низкий

7.5 High

CVSS3

Дефекты

CWE-22