Lucene search

K
cveCertccCVE-2013-6030
HistoryJan 24, 2014 - 4:38 a.m.

CVE-2013-6030

2014-01-2404:38:09
CWE-22
certcc
web.nvd.nist.gov
21
cve-2013-6030
directory traversal
emerson network power
avocent mergepoint unity 2016
kvm switch
remote code execution

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

65.5%

Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 (aka MPU2016) KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file.

Affected configurations

Nvd
Node
emersonnetwork_power_avocent_mergepoint_unity_2016_firmwareMatch1.9.16473
AND
emersonnetwork_power_avocent_mergepoint_unity_2016_firmwareMatch1.9.16473
VendorProductVersionCPE
emersonnetwork_power_avocent_mergepoint_unity_2016_firmware1.9.16473cpe:2.3:h:emerson:network_power_avocent_mergepoint_unity_2016_firmware:1.9.16473:*:*:*:*:*:*:*
emersonnetwork_power_avocent_mergepoint_unity_2016_firmware1.9.16473cpe:2.3:o:emerson:network_power_avocent_mergepoint_unity_2016_firmware:1.9.16473:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

65.5%