CVE-2023-6919

HIGH

7.5

Description

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C.

CVE Details

CVSS v3.1 Score7.5

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published1/26/2024

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

biges:vg-255-bvbiges:vg-255-bv_firmwarebiges:vg-255-dfbiges:vg-255-df_firmwarebiges:vg-255a-bfbiges:vg-255a-bf_firmwarebiges:vg-4c1a-lrpubiges:vg-4c1a-lrpu_firmwarebiges:vg-4c1a-lrubiges:vg-4c1a-lru_firmwarebiges:vg-4c1e-nvrbiges:vg-4c1e-nvr_firmwarebiges:vg-64c8rd-nvrbiges:vg-64c8rd-nvr_firmwarebiges:vg-8c1a-lrpubiges:vg-8c1a-lrpu_firmwarebiges:vg-8c1e-nvrbiges:vg-8c1e-nvr_firmware

Weaknesses (CWE)

CWE-25

References

https://www.usom.gov.tr/bildirim/tr-24-0054(iletisim@usom.gov.tr)

https://www.usom.gov.tr/bildirim/tr-24-0054(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.