Path traversal

2020-09-1616:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

JSON

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory (‘Path Transversal’) vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place content in any unprotected folder on the target system using a crafted .RCZ file.

CPENameOperatorVersion
scadapack_7x_remote_connectle3.6.3.574

CPE	Name	Operator	Version
	scadapack_7x_remote_connect	le	3.6.3.574

References

www.se.com/ww/en/download/document/SEVD-2020-252-01/