CVE-2024-27575

INOTEC Sicherheitstechnik WebServer CPS220/64 3.3.19 allows a remote attacker to read arbitrary files via absolute path traversal, such as with the /cgi-bin/display?file=/etc/passwd URI...

CVE-2024-27575

The INOTEC Sicherheitstechnik WebServer CPS220/64 version 3.3.19 is vulnerable to an absolute path traversal flaw. A remote attacker can exploit this by using specific URIs, such as /cgi-bin/display?file=/etc/passwd, to read arbitrary files on the system. While the primary impact is unauthorized ...