CVE-2022-41607

CVE-2022-41607 affects ETIC Telecom Remote Access Server (RAS). All versions up to 4.5.0 are vulnerable to directory traversal via the API and related interfaces, potentially enabling an attacker to read sensitive files (e.g., SSH keys, passwords, scripts) and compromise the device. Public docume...

ETIC Telecom Remote Access Server (RAS) (Update B)

1. EXECUTIVE SUMMARY --------- Begin Update A Part 1 of 5 --------- CVSS v3 7.6 ATTENTION: Exploitable remotely/low attack complexity --------- End Update A Part 1 of 5 --------- Vendor: ETIC Telecom Equipment: Remote Access Server RAS Vulnerabilities: Insufficient Verification of Data...