Directory traversal

admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 HM 1.12.1 allows action=download&filename= Directory Traversal...

PT-2019-15785

Name of the Vulnerable Software and Affected Versions Fronius Solar Inverter devices versions prior to 3.14.1 HM 1.12.1 Description The issue allows for directory traversal via the action=download&filename= parameter in the admincgi-bin/service.fcgi endpoint. This could potentially lead to...

CVE-2019-19229: Improper Limitation of a Pathname to a Restricted Directory

admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 HM 1.12.1 allows action=download&filename= Directory Traversal...

Fronius Solar Inverter Series Path Traversal Vulnerability

The Fronius Solar Inverter is a photovoltaic inverter device from the Austrian company Fronius. A path traversal vulnerability exists in admincgi-bin/service.fcgi in versions prior to Fronius Solar Inverter 3.14.1 HM 1.12.1. The vulnerability stems from a failure of a network system or product to...