Lucene search

K
cve[email protected]CVE-2015-3939
HistoryMay 31, 2015 - 5:59 p.m.

CVE-2015-3939

2015-05-3117:59:07
CWE-22
web.nvd.nist.gov
28
cve-2015-3939
directory traversal
nc854
nc856
ids rtu 850c
remote authenticated users
telnet credentials file

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.9%

Directory traversal vulnerability in the NC854 and NC856 modules for IDS RTU 850C devices allows remote authenticated users to read arbitrary files via unspecified vectors involving an internal web server, as demonstrated by reading a TELNET credentials file.

Affected configurations

NVD
Node
idsnc854Match-
OR
idsnc856Match-
AND
idsids_rtu_850c
CPENameOperatorVersion
ids:nc854ids nc854eq-
ids:nc856ids nc856eq-

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.9%

Related for CVE-2015-3939