Описание
A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with service user privileges to upload arbitrary files. By uploading a specially crafted tar file an attacker can execute arbitrary commands.
Ссылки
- Broken Link
- Third Party AdvisoryUS Government Resource
- Broken Link
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1
Одновременно
Одно из
cpe:2.3:o:bbraun:datamodule_compactplus:a10:*:*:*:*:*:*:*
cpe:2.3:o:bbraun:datamodule_compactplus:a11:*:*:*:*:*:*:*
cpe:2.3:h:bbraun:datamodule_compactplus:-:*:*:*:*:*:*:*
Конфигурация 2Версия до l81 (включая)
Одновременно
cpe:2.3:o:bbraun:spacecom:*:*:*:*:*:*:*:*
cpe:2.3:h:bbraun:spacecom:-:*:*:*:*:*:*:*
EPSS
Процентиль: 62%
0.0043
Низкий
7.6 High
CVSS3
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-23
CWE-22
Связанные уязвимости
CVSS3: 8.8
github
почти 4 года назад
A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers with service user privileges to upload arbitrary files. By uploading a specially crafted tar file an attacker can execute arbitrary commands.
EPSS
Процентиль: 62%
0.0043
Низкий
7.6 High
CVSS3
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-23
CWE-22