Lucene search
IcscertCVELIST:CVE-2023-0956HistoryAug 03, 2023 - 6:08 p.m.
CVE-2023-0956 TEL-STER TelWin SCADA WebInterface Path Traversal
2023-08-0318:08:13
icscert
www.cve.org
4
tel-ster
telwin
scada
external input
vulnerability
path traversal
unauthenticated attacker
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
51.0%
External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "TelWin SCADA WebInterface",
"vendor": "TEL-STER",
"versions": [
{
"lessThanOrEqual": "6.1",
"status": "affected",
"version": "3.2",
"versionType": "custom"
},
{
"lessThanOrEqual": "7.1",
"status": "affected",
"version": "7.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "9.0",
"status": "affected",
"version": "8.0",
"versionType": "custom"
}
]
}
]Related
ics
ics
TEL-STER TelWin SCADA WebInterface
2023-08-03 12:00:00
prion
prion
Xxe
2023-08-03 19:15:00
cve
cve
CVE-2023-0956
2023-08-03 19:15:10
nvd
nvd
CVE-2023-0956
2023-08-03 19:15:10
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
51.0%
Related for CVELIST:CVE-2023-0956