PT-2024-2268 · Unitronics · Unilogic

CVE-2024-27770

·

Published

2024-03-18

·

Updated

2024-03-18

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Unitronics Unistream Unilogic versions prior to 1.35.227
Description The issue is related to errors in processing relative path to directory, which can allow a remote attacker to bypass security restrictions and execute arbitrary code. This is a case of relative path traversal.
Recommendations For versions prior to 1.35.227, update to version 1.35.227 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive directories and implementing additional security measures to minimize the risk of exploitation.

Fix

Relative Path Traversal

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-02201
CVE-2024-27770

Affected Products

Unilogic