PT-2013-5452
CVE-2013-5219
·
تاريخ النشر
2013-12-30
·
تاريخ التحديث
2013-12-30
الوصف من
CVSS 2.0
3.3
منخفضةالمقاييسAV:A/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
HOT HOTBOX router version 2.1.11
Description
A directory traversal issue allows remote attackers to read arbitrary files by including a .. (dot dot) in a URI. For example, a request for "/etc/passwd" can be used to exploit this issue.
Recommendations
For version 2.1.11, consider restricting access to sensitive files and directories until a patch is available. As a temporary workaround, avoid using URI requests that include .. (dot dot) to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾