CVE-2023-2880

CVE-2023-2880 concerns Frauscher Sensortechnik GmbH FDS001 (FAdC/FAdCi) web interface. A path traversal vulnerability in the web UI, exploitable via a crafted URL without authentication, allows a remote attacker to read any file on the device filesystem. Impact is confirmed in multiple sources fo...

Frauscher Sensortechnik GmbH FDS001 路径遍历漏洞

Frauscher Sensortechnik GmbH FDS001 is a diagnostic system device from Frauscher. A path traversal vulnerability exists in Frauscher Sensortechnik GmbH FDS001 version 1.3.3 and earlier, which stems from the presence of a path traversal vulnerability. An attacker can exploit this vulnerability to...

PT-2023-21975 · Frauscher Sensortechnik Gmbh · Fds001

Name of the Vulnerable Software and Affected Versions: Frauscher Sensortechnik GmbH FDS001 for FAdC/FAdCi versions 1.3.3 and earlier Description: The issue allows a remote attacker to read all files on the filesystem of the FDS001 device through a path traversal vulnerability of the web interface...

CVE-2023-2880: Improper Limitation of a Pathname to a Restricted Directory

Frauscher Sensortechnik GmbH FDS001 for FAdC/FAdCi v1.3.3 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesystem of the FDS001 device...

CVE-2022-3575

Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device...

CVE-2022-3575

Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device...

Authentication flaw

Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device...

CVE-2022-3575 Frauscher Sensortechnik Diagnostic System FDS102 for FAdC R2 and FAdCi R2 configuration upload vulnerability

Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device...

CVE-2022-3575 Frauscher Sensortechnik Diagnostic System FDS102 for FAdC R2 and FAdCi R2 configuration upload vulnerability

Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device...

CVE-2022-3575

Frauscher Sensortechnik GmbH FDS102 (FAdC R2 and FAdCi R2) versions 2.8.0–2.9.1 are affected by an unauthenticated upload of malicious code via the configuration upload feature, enabling a complete compromise of the FDS102 device. The root cause is an authentication bypass in the configuration up...

Frauscher Sensortechnik FDS102 代码问题漏洞

The Frauscher Sensortechnik FDS102 is a diagnostic system device from Frauscher. A code issue vulnerability exists in the Frauscher Sensortechnik FDS102 that originates from uploading malicious code without authentication via the configuration upload function...

PT-2022-22959 · Frauscher Sensortechnik Gmbh · Fds102

Name of the Vulnerable Software and Affected Versions: Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 versions 2.8.0 through 2.9.1 Description: The issue allows malicious code upload without authentication by using the configuration upload function, which could lead to a complete...

CVE-2022-3575: Unrestricted Upload of File with Dangerous Type

Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device...