CVE-2019-11603 in ProSyst mBS SDK

Sumário

de MITRE

A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remote attackers to read files outside the http root.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsável: MITRE
• Reservar: 30/04/2019
• Moderação: aceite
• Entrada: VDB-140526
• CPE: pronto
• CWE: CWE-22 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.02420
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-11603
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-11603
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-11603/