Lawo AG vsm LTC Time Sync Path Traversal

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unauthenticated Path Traversal Vulnerability product: Lawo AG - vsm LTC Time Sync vTimeSync vulnerable version: 4.5.6.0 fixed version: 4.5.6.0 CVE number: CVE-2024-6049...

CVE-2024-6049

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...

CVE-2024-6049 Unauthenticated Path Traversal

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...

CVE-2024-6049

The web server of Lawo AG vsm LTC Time Sync (vTimeSync) is vulnerable to a "..." (triple dot) path traversal vulnerability (CWE-32). An unauthenticated remote attacker can exploit this by sending a specially crafted HTTP request to download arbitrary files from the operating system. This exploita...

PT-2024-37344

Name of the Vulnerable Software and Affected Versions: Lawo AG vsm LTC Time Sync vTimeSync affected versions not specified Description: The web server is affected by a "..." triple dot path traversal issue. An unauthenticated remote attacker could download arbitrary files from the operating syste...

CVE-2024-6049: Path Traversal: '...' (Triple Dot)

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...