Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gj9w-8jqj-698c

Опубликовано: 09 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 2.5

Описание

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the deviceinfo binary via the mac parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file named address.

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the deviceinfo binary via the mac parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file named address.

EPSS

Процентиль: 24%
0.00082
Низкий

2.5 Low

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 2.5
nvd
больше 2 лет назад

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the `mac` parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file named `address`.

CVSS3: 2.5
fstec
больше 2 лет назад

Уязвимость микропрограммного обеспечения промышленных коммутаторов Siemens Scalance LPE9403, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 24%
0.00082
Низкий

2.5 Low

CVSS3

Дефекты

CWE-22