PT-2020-14458
CVE-2020-15492
·
تاريخ النشر
2020-07-23
·
تاريخ التحديث
2020-07-28
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
INNEO Startup TOOLS versions 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804
Description
An issue in the sut srv.exe web application allows user input to be included into a filesystem access without validation, potentially enabling an unauthenticated attacker to read files on the server via Directory Traversal. This could have unspecified other impact.
Recommendations
For versions 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804, consider restricting access to the sut srv.exe web application served on TCP port 85 until a fix is available. As a temporary workaround, restrict filesystem access to prevent unauthorized file reading.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾