VulnCheck KEV: CVE-2018-16059

Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter...

CVE-2018-16059: Improper Limitation of a Pathname to a Restricted Directory

Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter...

PT-2018-13395

Name of the Vulnerable Software and Affected Versions Endress+Hauser WirelessHART Fieldgate SWG70 versions 3.x Description The issue allows Directory Traversal via the filename parameter in the "fcgi-bin/wgsetcgi" endpoint. Recommendations For Endress+Hauser WirelessHART Fieldgate SWG70 versions...

WirelessHART Fieldgate SWG70 3.0 - Directory Traversal

Exploit Title: WirelessHART Fieldgate SWG70 3.0 - Directory Traversal Date: 2018-08-29 Exploit Author: Hamit CİBO Vendor Homepage: http://endress.com Software Link: https://www.endress.com/en/Field-instruments-overview/System-Components-Recorder-Data-Manager/wirelesshart-gateway-fieldgate-swg70...