The vulnerability of the “Kordon” multi-purpose radar system family arises from an incorrect limitation on the name of the path to the catalog, allowing attackers to read arbitrary files.

The vulnerability of the Cordon multi-purpose photodetection systems is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to read arbitrary files...