PT-2019-12242
CVE-2019-11327
·
Publicado
2019-09-20
·
Atualizado
2019-09-23
Descrição por
CVSS 3.1
4.9
MédiaMétricasAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Topcon Positioning Net-G5 GNSS Receiver version 5.2.2
Description
The web interface of the product has a local file inclusion issue. An attacker with administrative privileges can craft a special URL to read arbitrary files from the device's file system.
Recommendations
For version 5.2.2, consider restricting access to the web interface until a fix is available. As a temporary workaround, limit administrative privileges to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾