PT-2017-10088 · Fidelix · Fidelix Fx-20 Series Controllers

Semen Rozhkov · Publicado 2017-02-13 · Atualizado 2017-02-23 · CVE-2016-9364

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Fidelix FX-20 series controllers versions prior to 11.50.19

Description An issue allows arbitrary file reading via path traversal, enabling an attacker to access arbitrary files and directories on the server.

Recommendations For versions prior to 11.50.19, update to version 11.50.19 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2016-9364

Produtos afetados

Fidelix Fx-20 Series Controllers

Referências · 4

• http://securityfocus.com/bid/95073 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-16-357-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9364 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-9364 · Aviso do Fabricante