CVE-2019-11327

Name of the Vulnerable Software and Affected Versions Topcon Positioning Net-G5 GNSS Receiver version 5.2.2

Description The web interface of the product has a local file inclusion issue. An attacker with administrative privileges can craft a special URL to read arbitrary files from the device's file system.

Recommendations For version 5.2.2, consider restricting access to the web interface until a fix is available. As a temporary workaround, limit administrative privileges to minimize the risk of exploitation.