Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-7751

Опубликовано: 31 дек. 2019
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Средний

Описание

A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, formerly PTI Marketing, FusionPro VDP before 10.0 allows a remote attacker to list or enumerate sensitive contents of files. Furthermore, this could allow for privilege escalation by dumping the local machine's SAM and SYSTEM database files, and possibly remote code execution.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ricoh:fusionpro_vdp:*:*:*:*:*:*:*:*
Версия до 10.0 (исключая)

EPSS

Процентиль: 94%
0.12732
Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

github
больше 3 лет назад

A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, formerly PTI Marketing, FusionPro VDP before 10.0 allows a remote attacker to list or enumerate sensitive contents of files. Furthermore, this could allow for privilege escalation by dumping the local machine's SAM and SYSTEM database files, and possibly remote code execution.

EPSS

Процентиль: 94%
0.12732
Средний

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22