CVE-2023-4152 in FDS101 for FAdC

Sumário

de MITRE • 21/09/2023

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesystem of the FDS101 device.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsável: CERT VDE
• Reservar: 04/08/2023
• Divulgação: 21/09/2023
• Moderação: aceite
• Entrada: VDB-240119
• CPE: pronto
• CWE: CWE-22 (confirmado)
• CVSS: 7.5 (CNA)
• EPSS: 0.00742
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-4152
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-4152
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-4152/