CVE-2018-7539

On Appear TV XC5000 and XC5100 devices with firmware 3.26.217, it is possible to read OS files with a specially crafted HTTP request such as GET /../../../../../../../../../../../../etc/passwd to the web server fuzzd/0.1.1 running the Maintenance Center on port TCP/8088. This can lead to full...

CVE-2018-7539

On Appear TV XC5000 and XC5100 devices with firmware 3.26.217, it is possible to read OS files with a specially crafted HTTP request such as GET /../../../../../../../../../../../../etc/passwd to the web server fuzzd/0.1.1 running the Maintenance Center on port TCP/8088. This can lead to full...

Design/Logic Flaw

On Appear TV XC5000 and XC5100 devices with firmware 3.26.217, it is possible to read OS files with a specially crafted HTTP request such as GET /../../../../../../../../../../../../etc/passwd to the web server fuzzd/0.1.1 running the Maintenance Center on port TCP/8088. This can lead to full...

CVE-2018-7539

On Appear TV XC5000 and XC5100 devices with firmware 3.26.217, it is possible to read OS files with a specially crafted HTTP request such as GET /../../../../../../../../../../../../etc/passwd to the web server fuzzd/0.1.1 running the Maintenance Center on port TCP/8088. This can lead to full...

CVE-2018-7539

CVE-2018-7539 affects Appear TV XC5000 and XC5100 devices running firmware 3.26.217. The web server (fuzzd/0.1.1) in Maintenance Center on port 8088 is vulnerable to a directory-traversal attack using crafted URLs (e.g., GET /../../../../../../../../../../../../etc/passwd), allowing an attacker t...

PT-2018-18143

Name of the Vulnerable Software and Affected Versions Appear TV XC5000 and XC5100 devices with firmware 3.26.217 Description The issue allows an attacker to read OS files by sending a specially crafted HTTP request, such as GET /../../../../../../../../../../../../etc/passwd, to the web server...

CVE-2018-7539: Improper Limitation of a Pathname to a Restricted Directory

On Appear TV XC5000 and XC5100 devices with firmware 3.26.217, it is possible to read OS files with a specially crafted HTTP request such as GET /../../../../../../../../../../../../etc/passwd to the web server fuzzd/0.1.1 running the Maintenance Center on port TCP/8088. This can lead to full...

Appear TV XC Hardware Maintenance Centre Directory Traversal

CVE-2018-7539 Directory Traversal on Appear TV Maintenance centre 8088 Discoverer: Arqiva Threat Team Person Karl W Product: Appear TV XC Hardware Maintenance Centre on port TCP/8088 Vendor : Appear TV Code Versions: All Version Vulnerability: Directory Traversal Impact: It is possible to read OS...