JVN#25583987: FUJITSU Network Edgiot GW1500 vulnerable to path traversal

FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS) provided by Fujitsu Limited contains a path traversal vulnerability (CWE-22).

Impact

If a logged-in attacker with User Class privilege sends a specially crafted request to the affected product, access restricted files containing sensitive information may be accessed. As a result, Administrator Class privileges of the product may be hijacked.

Solution

Apply the Patch
Apply the patch according to the information provided by the developer.

Apply the Workaround
The following workaround may mitigate the impact of this vulnerability.

• Change Administrator Class’s password when resetting the initial configuration of the product

Products Affected

• FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS) versions prior to V02L19C01
  Note that the products is affected only when using it with the factory shipped initial configuration.