CVE-2024-40617

2024-07-1708:44:44

jpcert

www.cve.org

path traversal

fujitsu network edgiot gw1500

remote attacker

sensitive information

EPSS

0.001

Percentile

19.8%

JSON

Path traversal vulnerability exists in FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS). If a remote authenticated attacker with User Class privilege sends a specially crafted request to the affected product, access restricted files containing sensitive information may be accessed. As a result, Administrator Class privileges of the product may be hijacked.

CNA Affected

[
  {
    "vendor": "Fujitsu Limited",
    "product": "FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS)",
    "versions": [
      {
        "version": "prior to V02L19C01",
        "status": "affected"
      }
    ]
  }
]