CVE-2020-17383

2022-01-2419:08:43

mitre

www.cve.org

telos z/ip one

directory traversal

unauthenticated access

root level

file system

webui

AI Score

9.8

Confidence

High

EPSS

0.012

Percentile

85.5%

JSON

A directory traversal vulnerability on Telos Z/IP One devices through 4.0.0r grants an unauthenticated individual root level access to the device’s file system. This can be used to identify configuration settings, password hashes for built-in accounts, and the cleartext password for remote configuration of the device through the WebUI.