Описание
Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows an attacker to download the application database. This can be combined with CVE-2020-10795 for remote root access.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:gira:tks-ip-gateway_firmware:4.0.7.7:*:*:*:*:*:*:*
cpe:2.3:h:gira:tks-ip-gateway:-:*:*:*:*:*:*:*
EPSS
Процентиль: 80%
0.01354
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
github
больше 3 лет назад
Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows an attacker to download the application database. This can be combined with CVE-2020-10795 for remote root access.
EPSS
Процентиль: 80%
0.01354
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-22