← Zuruck zu CVEs
CVE-2020-37086
MEDIUM6.2
Beschreibung
Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows remote attackers to access unauthorized file system paths without authentication. Attackers can exploit the vulnerability by manipulating path parameters in GET and POST requests to list or download sensitive system files and inject malicious scripts into application parameters.
CVE Details
CVSS v3.1 Bewertung6.2
SchweregradMEDIUM
CVSS VektorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AngriffsvektorLOCAL
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionNONE
Veroffentlicht2/3/2026
Zuletzt geandert2/4/2026
Quellenvd
Honeypot-Sichtungen0
Schwachen (CWE)
CWE-22
Referenzen
https://apps.apple.com/us/app/easy-transfer-wifi-transfer/id1484667078(disclosure@vulncheck.com)
https://www.exploit-db.com/exploits/48395(disclosure@vulncheck.com)
https://www.vulncheck.com/advisories/easy-transfer-for-ios-directory-traversal(disclosure@vulncheck.com)
https://www.vulnerability-lab.com/get_content.php?id=2223(disclosure@vulncheck.com)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.