Lucene search
MitreCVE-2012-1025HistoryFeb 08, 2012 - 12:55 a.m.
CVE-2012-1025
2012-02-0800:55:02
CWE-22
mitre
web.nvd.nist.gov
25
cve-2012-1025
enigma2
webinterface
security
vulnerability
file parameter
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.9
Confidence
Low
EPSS
0.006
Percentile
78.8%
Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter.
Affected configurations
Node
dream-multimedia-tvenigma2_webinterfaceMatch1.6rc3
ORdream-multimedia-tvenigma2_webinterfaceMatch1.6.0
ORdream-multimedia-tvenigma2_webinterfaceMatch1.6.1
ORdream-multimedia-tvenigma2_webinterfaceMatch1.6.2
ORdream-multimedia-tvenigma2_webinterfaceMatch1.6.3
ORdream-multimedia-tvenigma2_webinterfaceMatch1.6.4
ORdream-multimedia-tvenigma2_webinterfaceMatch1.6.5
ORdream-multimedia-tvenigma2_webinterfaceMatch1.6.6
ORdream-multimedia-tvenigma2_webinterfaceMatch1.6.7
ORdream-multimedia-tvenigma2_webinterfaceMatch1.6.8
ORdream-multimedia-tvenigma2_webinterfaceMatch1.7.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dream-multimedia-tv | enigma2_webinterface | 1.6 | cpe:2.3:a:dream-multimedia-tv:enigma2_webinterface:1.6:rc3:*:*:*:*:*:* |
| dream-multimedia-tv | enigma2_webinterface | 1.6.0 | cpe:2.3:a:dream-multimedia-tv:enigma2_webinterface:1.6.0:*:*:*:*:*:*:* |
| dream-multimedia-tv | enigma2_webinterface | 1.6.1 | cpe:2.3:a:dream-multimedia-tv:enigma2_webinterface:1.6.1:*:*:*:*:*:*:* |
| dream-multimedia-tv | enigma2_webinterface | 1.6.2 | cpe:2.3:a:dream-multimedia-tv:enigma2_webinterface:1.6.2:*:*:*:*:*:*:* |
| dream-multimedia-tv | enigma2_webinterface | 1.6.3 | cpe:2.3:a:dream-multimedia-tv:enigma2_webinterface:1.6.3:*:*:*:*:*:*:* |
| dream-multimedia-tv | enigma2_webinterface | 1.6.4 | cpe:2.3:a:dream-multimedia-tv:enigma2_webinterface:1.6.4:*:*:*:*:*:*:* |
| dream-multimedia-tv | enigma2_webinterface | 1.6.5 | cpe:2.3:a:dream-multimedia-tv:enigma2_webinterface:1.6.5:*:*:*:*:*:*:* |
| dream-multimedia-tv | enigma2_webinterface | 1.6.6 | cpe:2.3:a:dream-multimedia-tv:enigma2_webinterface:1.6.6:*:*:*:*:*:*:* |
| dream-multimedia-tv | enigma2_webinterface | 1.6.7 | cpe:2.3:a:dream-multimedia-tv:enigma2_webinterface:1.6.7:*:*:*:*:*:*:* |
| dream-multimedia-tv | enigma2_webinterface | 1.6.8 | cpe:2.3:a:dream-multimedia-tv:enigma2_webinterface:1.6.8:*:*:*:*:*:*:* |
References
Related
nvd
nvd
CVE-2012-1025
2012-02-08 00:55:02
prion
prion
Path traversal
2012-02-08 00:55:00
cvelist
cvelist
CVE-2012-1025
2012-02-08 00:00:00
exploitdb
exploitdb
Enigma2 Webinterface 1.5.x/1.6.x/1.7.x (Linux) - Remote File Disclosure
2012-01-09 00:00:00
openvas
openvas
Enigma2 'file' Parameter Information Disclosure Vulnerability
2012-01-10 00:00:00
Enigma2 Information Disclosure Vulnerability (Jan 2012) - Active Check
2012-01-10 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.9
Confidence
Low
EPSS
0.006
Percentile
78.8%
Related for CVE-2012-1025