CVE-2024-27575

INOTEC Sicherheitstechnik WebServer CPS220/64 3.3.19 allows a remote attacker to read arbitrary files via absolute path traversal, such as with the /cgi-bin/display?file=/etc/passwd URI...

CVE-2024-27575

CVE-2024-27575 affects INOTEC Sicherheitstechnik WebServer CPS220/64 3.3.19. The vulnerability allows remote attackers to read arbitrary files via absolute path traversal, e.g. /cgi-bin/display?file=/etc/passwd. Some sources also raise a possibility of code execution via the same file path, thoug...