Lucene search

K
nessusThis script is Copyright (C) 2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500386.NASL
HistoryAug 10, 2021 - 12:00 a.m.

Yokogawa Centum Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

2021-08-1000:00:00
This script is Copyright (C) 2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
16

0.005 Low

EPSS

Percentile

76.5%

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to create or overwrite arbitrary files and run arbitrary commands via unspecified vectors.

File data ot_500386.nasl
VendorProductVersionCPE
yokogawacentum_cs_3000_firmware*cpe:2.3:o:yokogawa:centum_cs_3000_firmware:*:*:*:*:*:*:*:*
yokogawacentum_vp_firmware*cpe:2.3:o:yokogawa:centum_vp_firmware:*:*:*:*:*:*:*:*
yokogawab\/m9000cs_firmware*cpe:2.3:o:yokogawa:b\/m9000cs_firmware:*:*:*:*:*:*:*:*
yokogawab\/m9000vp_firmware*cpe:2.3:o:yokogawa:b\/m9000vp_firmware:*:*:*:*:*:*:*:*

0.005 Low

EPSS

Percentile

76.5%

Related for OT_500386.NASL