Directory traversal

2019-12-0419:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.8%

JSON

admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal.

CPENameOperatorVersion
datamanager_box_2.0_firmwarelt3.14.1
eco_25.0-3-s_firmwarelt3.14.1
eco_27.0-3-s_firmwarelt3.14.1
galvo_1.5-1_208-240_firmwarelt3.14.1
galvo_1.5-1_firmwarelt3.14.1
galvo_2.0-1_208-240_firmwarelt3.14.1
galvo_2.0-1_firmwarelt3.14.1
galvo_2.5-1_208-240_firmwarelt3.14.1
galvo_2.5-1_firmwarelt3.14.1
galvo_3.0-1_firmwarelt3.14.1

Name	Operator	Version
datamanager_box_2.0_firmware	lt	3.14.1
eco_25.0-3-s_firmware	lt	3.14.1
eco_27.0-3-s_firmware	lt	3.14.1
galvo_1.5-1_208-240_firmware	lt	3.14.1
galvo_1.5-1_firmware	lt	3.14.1
galvo_2.0-1_208-240_firmware	lt	3.14.1
galvo_2.0-1_firmware	lt	3.14.1
galvo_2.5-1_208-240_firmware	lt	3.14.1
galvo_2.5-1_firmware	lt	3.14.1
galvo_3.0-1_firmware	lt	3.14.1