CVE-2023-6919

HIGH

7.5

Descricao

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C.

Detalhes CVE

Pontuacao CVSS v3.17.5

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado1/26/2024

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

biges:vg-255-bvbiges:vg-255-bv_firmwarebiges:vg-255-dfbiges:vg-255-df_firmwarebiges:vg-255a-bfbiges:vg-255a-bf_firmwarebiges:vg-4c1a-lrpubiges:vg-4c1a-lrpu_firmwarebiges:vg-4c1a-lrubiges:vg-4c1a-lru_firmwarebiges:vg-4c1e-nvrbiges:vg-4c1e-nvr_firmwarebiges:vg-64c8rd-nvrbiges:vg-64c8rd-nvr_firmwarebiges:vg-8c1a-lrpubiges:vg-8c1a-lrpu_firmwarebiges:vg-8c1e-nvrbiges:vg-8c1e-nvr_firmware

Fraquezas (CWE)

CWE-25

Referencias

https://www.usom.gov.tr/bildirim/tr-24-0054(iletisim@usom.gov.tr)

https://www.usom.gov.tr/bildirim/tr-24-0054(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.