CVE-2021-46417 in Colibri Controller Module

Riassunto

di MITRE • 07/04/2022

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 24/01/2022
• Divulgazione: 07/04/2022
• Moderazione: accettato
• Voce: VDB-196630
• CPE: pronto
• CWE: CWE-22 (confermato)
• Sfruttamento: Scaricare
• CVSS: 8.0 (VulDB)
• EPSS: 0.59753
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-46417
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-46417
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-46417/