8 matches found
CVE-2023-37217
Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy...
CVE-2023-37218
Tadiran Telecom Aeonix - CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
Design/Logic Flaw
Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy...
CVE-2023-37218
CVE-2023-37218 affects Tadiran Telecom Aeonix (software UC&C). The vulnerability is a Path Traversal (CWE-22) due to improper limitation of a pathname to a restricted directory. Attack vector is NETWORK with no authentication required and no user interaction; CVSS 3.1 base score 7.5 (HIGH) with C...
CVE-2023-37217
CVE-2023-37217 affects Tadiran Telecom Aeonix. The vulnerability is described as an observable response discrepancy (CWE-204) that can reveal differences in responses; a false comparison vulnerability is noted in external summaries (CNNVD/PT-2023-25835) as the underlying issue. CVSS data indicate...
PT-2023-25836
Name of the Vulnerable Software and Affected Versions Tadiran Telecom Aeonix affected versions not specified Description The issue is related to improper limitation of a pathname to a restricted directory, also known as 'Path Traversal'. This allows an attacker to access files or directories...
CVE-2023-37218: Improper Limitation of a Pathname to a Restricted Directory
Tadiran Telecom Aeonix - CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...