Lucene search
HistoryMay 04, 2023 - 10:15 a.m.
CVE-2017-20184
vulnerability
path traversal
carlo gavazzi powersoft
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.013 Low
EPSS
Percentile
86.0%
Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in Carlo Gavazzi Powersoft up to version 2.1.1.1 allows an unauthenticated, remote attacker to download any file from the affected device.
Affected configurations
Node
gavazzionlinepowersoftRange≤2.1.1.1
References
Related
ics
ics
Carlo Gavazzi Powersoft
2023-05-18 12:00:00
cvelist
cvelist
CVE-2017-20184 Carlo Gavazzi Powersoft prone to Path Traversal
2023-05-04 09:17:54
cve
cve
CVE-2017-20184
2023-05-04 10:15:10
prion
prion
Path traversal
2023-05-04 10:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.013 Low
EPSS
Percentile
86.0%
Related for NVD:CVE-2017-20184