CVE-2019-18253

2019-11-2722:05:47

CWE-22

icscert

www.cve.org

AI Score

9.2

Confidence

High

EPSS

0.003

Percentile

65.2%

JSON

An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series (versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior) outside the intended directory.

CNA Affected

[
  {
    "product": "Relion 670 Series",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsa-19-330-01