CVE-2012-4031

Name of the Vulnerable Software and Affected Versions Wangkongbao CNS-1000 and 1100

Description The issue concerns multiple directory traversal vulnerabilities. These vulnerabilities allow remote attackers to read arbitrary files. The attack can be performed by including a .. (dot dot) in the lang or langid cookie to port 85.

Recommendations For Wangkongbao CNS-1000 and 1100, restrict access to the acloglogin.php file until a patch is available. As a temporary workaround, consider filtering out .. (dot dot) sequences from the lang and langid cookies to prevent directory traversal attacks.