Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-crjm-65gw-qhwr

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain path.Affected product versions include:PC Smart Full Scene 11.1 versions PCManager 11.1.1.97.

There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain path.Affected product versions include:PC Smart Full Scene 11.1 versions PCManager 11.1.1.97.

EPSS

Процентиль: 14%
0.00045
Низкий

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.5
nvd
больше 4 лет назад

There is a path traversal vulnerability in Huawei PC product. Because the product does not filter path with special characters,attackers can construct a file path with special characters to exploit this vulnerability. Successful exploitation could allow the attacker to transport a file to certain path.Affected product versions include:PC Smart Full Scene 11.1 versions PCManager 11.1.1.97.

CVSS3: 8.8
fstec
больше 4 лет назад

Уязвимость приложения для передачи файлов Huawei PCManager, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю перенести файл по определенному пути

EPSS

Процентиль: 14%
0.00045
Низкий

Дефекты

CWE-22