CVE-2023-37218

Tadiran Telecom Aeonix - CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2023-37217

Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy...

Design/Logic Flaw

Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy...

CVE-2023-37218

CVE-2023-37218 affects Tadiran Telecom Aeonix (software UC&C). The vulnerability is a Path Traversal (CWE-22) due to improper limitation of a pathname to a restricted directory. Attack vector is NETWORK with no authentication required and no user interaction; CVSS 3.1 base score 7.5 (HIGH) with C...

CVE-2023-37217

CVE-2023-37217 affects Tadiran Telecom Aeonix. The vulnerability is described as an observable response discrepancy (CWE-204) that can reveal differences in responses; a false comparison vulnerability is noted in external summaries (CNNVD/PT-2023-25835) as the underlying issue. CVSS data indicate...