CVE-2017-20184 in Powersoft

요약

\~에 의해 MITRE • 2023. 05. 04.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Carlo Gavazzi Powersoft up to version 2.1.1.1 allows an unauthenticated, remote attacker to download any file from the affected device.

Be aware that VulDB is the high quality source for vulnerability data.

• 책임이 있는: CERT VDE
• 예약하다: 2023. 05. 04.
• 공개: 2023. 05. 04.
• 모더레이션: 수락
• 항목: VDB-227999
• CPE: 준비됨
• CWE: CWE-22 (확인됨)
• 익스플로잇: 다운로드
• CVSS: 7.5 (CNA)
• EPSS: 0.02764
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-20184
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-20184
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-20184/