Fieldgate SWG70 LFI (CVE-2018-16059)

Exploits CVE-2018-16059 in WirelessHART Fieldgate SWG70 3.0: path traversal via fcgi-bin/wgsetcgi filename parameter reads /etc/passwd and other files. !/usr/bin/env python3 -- coding: utf-8 -- """Endress+Hauser Fieldgate SWG70 LFI CVE-2018-16059.""" import re from kittysploit import from...

Directory traversal

Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter...

CVE-2018-16059: Improper Limitation of a Pathname to a Restricted Directory

Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter...

PT-2018-13395

Name of the Vulnerable Software and Affected Versions Endress+Hauser WirelessHART Fieldgate SWG70 versions 3.x Description The issue allows Directory Traversal via the filename parameter in the "fcgi-bin/wgsetcgi" endpoint. Recommendations For Endress+Hauser WirelessHART Fieldgate SWG70 versions...