CVE-2023-34834

2023-06-2903:15:09

[email protected]

web.nvd.nist.gov

directory browsing

mcl-net

webserver

port 5080

sensitive information

configured databases

file endpoint

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0.086

Percentile

94.6%

JSON

A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensitive information about the configured databases via the “/file” endpoint.

Affected configurations

Nvd

Node

mcl-collectionmcl-netMatch-

AND

mcl-collectionmcl-net_firmwareMatch4.3.5.8788

VendorProductVersionCPE
mcl-collectionmcl-net-cpe:2.3:h:mcl-collection:mcl-net:-:*:*:*:*:*:*:*
mcl-collectionmcl-net_firmware4.3.5.8788cpe:2.3:o:mcl-collection:mcl-net_firmware:4.3.5.8788:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mcl-collection	mcl-net	-	cpe:2.3:h:mcl-collection:mcl-net:-:::::::*
mcl-collection	mcl-net_firmware	4.3.5.8788	cpe:2.3:o:mcl-collection:mcl-net_firmware:4.3.5.8788:::::::*