PT-2017-10069
CVE-2016-9339
·
Publicado
2017-02-13
·
Atualizado
2021-06-22
Descrição por
CVSS 3.1
5.3
MédiaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
INTERSCHALT Maritime Systems VDR G4e versions 5.220 and prior
Description
The issue allows an attacker to read files on the system due to a Path Traversal vulnerability. This occurs because external input is used to construct paths to files and directories without properly neutralizing special elements within the pathname.
Recommendations
For versions 5.220 and prior, consider restricting access to sensitive files and directories to minimize the risk of exploitation until a patch is available.
As a temporary workaround, avoid using external input to construct paths to files and directories until the issue is resolved.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾