Описание
Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.3 (включая)
Одновременно
cpe:2.3:o:danfoss:ak-sm_800a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:danfoss:ak-sm_800a:-:*:*:*:*:*:*:*
EPSS
Процентиль: 39%
0.00176
Низкий
8.8 High
CVSS3
Дефекты
CWE-22
CWE-22
Связанные уязвимости
CVSS3: 9.9
github
больше 2 лет назад
Due to improper restriction, attackers could retrieve and read system files of the underlying server through the XML interface.
EPSS
Процентиль: 39%
0.00176
Низкий
8.8 High
CVSS3
Дефекты
CWE-22
CWE-22