CVE-2023-0956

External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...

CVE-2023-0956 TEL-STER TelWin SCADA WebInterface Path Traversal

External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...

CVE-2023-0956

CVE-2023-0956 affects TEL-STER TelWin SCADA WebInterface, with a path traversal vulnerability (CWE-35) caused by external input not neutralizing path separators. This allows an unauthenticated, remote attacker to read files on affected systems. Affected versions span TelWin SCADA WebInterface 3.2...