Directory traversal

2020-08-0514:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.5%

JSON

Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, Basic) R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to create or overwrite arbitrary files and run arbitrary commands via unspecified vectors.

CPENameOperatorVersion
b\\/m9000cs_firmwareeq>= r5.4.1 AND <= r5.5.1
b\\/m9000vp_firmwareeq>= r6.1.1 AND <= r8.3.1
centum_cs_3000_firmwareeq>= r3.8.10 AND <= r3.9.50
centum_vp_firmwareeq>= r4.1.0 AND <= r4.3.0
centum_vp_firmwareeq>= r5.1.0 AND <= r5.4.20
centum_vp_firmwareeq>= r6.1.0 AND <= r6.7.0

Name	Operator	Version
b\\/m9000cs_firmware	eq	>= r5.4.1 AND <= r5.5.1
b\\/m9000vp_firmware	eq	>= r6.1.1 AND <= r8.3.1
centum_cs_3000_firmware	eq	>= r3.8.10 AND <= r3.9.50
centum_vp_firmware	eq	>= r4.1.0 AND <= r4.3.0
centum_vp_firmware	eq	>= r5.1.0 AND <= r5.4.20
centum_vp_firmware	eq	>= r6.1.0 AND <= r6.7.0