Path traversal

2017-02-1321:59:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.2%

JSON

An issue was discovered in INTERSCHALT Maritime Systems VDR G4e Versions 5.220 and prior. External input is used to construct paths to files and directories without properly neutralizing special elements within the pathname that could allow an attacker to read files on the system, a Path Traversal.

CPENameOperatorVersion
interschalt_vdr_g4e_firmwarele5.220

CPE	Name	Operator	Version
	interschalt_vdr_g4e_firmware	le	5.220

References

www.securityfocus.com/bid/94776

ics-cert.us-cert.gov/advisories/ICSA-16-343-04