Lucene search

TenableCVE-2024-8752

HistorySep 16, 2024 - 4:15 p.m.

CVE-2024-8752

2024-09-1616:15:14

CWE-22

tenable

web.nvd.nist.gov

windows

webiq

directory traversal

vulnerability

remote attackers

file read

system

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS4

9.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:N/SI:H/VA:N/SA:H

AI Score

6.6

Confidence

High

EPSS

0.003

Percentile

71.6%

JSON

The Windows version of WebIQ 2.15.9 is affected by a directory traversal vulnerability that allows remote attackers to read any file on the system.

Affected configurations

Nvd

Node

smart-hmiwebiqMatch2.15.9

AND

microsoftwindowsMatch-

VendorProductVersionCPE
smart-hmiwebiq2.15.9cpe:2.3:a:smart-hmi:webiq:2.15.9:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
smart-hmi	webiq	2.15.9	cpe:2.3:a:smart-hmi:webiq:2.15.9:::::::*
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*

CNA Affected

[
  {
    "collectionURL": "https://www.smart-hmi.com/",
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "WebIQ",
    "vendor": "Smart HMI",
    "versions": [
      {
        "status": "affected",
        "version": "2.15.19"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2024-38

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS4

9.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:N/SI:H/VA:N/SA:H

AI Score

6.6

Confidence

High

EPSS

0.003

Percentile

71.6%

JSON

Related for CVE-2024-8752