CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
Confidence
High
EPSS
Percentile
80.6%
In Anti-Web through 3.8.7, as used on NetBiter FGW200 devices through 3.21.2, WS100 devices through 3.30.5, EC150 devices through 1.40.0, WS200 devices through 3.30.4, EC250 devices through 1.40.0, and other products, an LFI vulnerability allows a remote attacker to read or modify files through a path traversal technique, as demonstrated by reading the password file, or using the template parameter to cgi-bin/write.cgi to write to an arbitrary file.
Vendor | Product | Version | CPE |
---|---|---|---|
hoytech | antiweb | * | cpe:2.3:a:hoytech:antiweb:*:*:*:*:*:*:*:* |
hoytech | antiweb | 3.0.7 | cpe:2.3:a:hoytech:antiweb:3.0.7:hms2:*:*:*:*:*:* |
hoytech | antiweb | 3.3.5 | cpe:2.3:a:hoytech:antiweb:3.3.5:*:*:*:*:*:*:* |
hoytech | antiweb | 3.6.1 | cpe:2.3:a:hoytech:antiweb:3.6.1:*:*:*:*:*:*:* |
hoytech | antiweb | 3.7.1 | cpe:2.3:a:hoytech:antiweb:3.7.1:*:*:*:*:*:*:* |
hoytech | antiweb | 3.7.2 | cpe:2.3:a:hoytech:antiweb:3.7.2:*:*:*:*:*:*:* |
hoytech | antiweb | 3.8.1 | cpe:2.3:a:hoytech:antiweb:3.8.1:*:*:*:*:*:*:* |
hoytech | antiweb | 3.8.2 | cpe:2.3:a:hoytech:antiweb:3.8.2:*:*:*:*:*:*:* |
hoytech | antiweb | 3.8.3 | cpe:2.3:a:hoytech:antiweb:3.8.3:*:*:*:*:*:*:* |
hoytech | antiweb | 3.8.4 | cpe:2.3:a:hoytech:antiweb:3.8.4:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
Confidence
High
EPSS
Percentile
80.6%