PT-2018-2184 · Unknown · Iiot Monitor

Publicado 2018-12-20 · Atualizado 2019-02-01 · CVE-2018-7835

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIoT Monitor version 3.1.38

Description A Path Traversal vulnerability exists in the software, which could allow access to files available to the SYSTEM user. This issue is related to the lack of filtering of special symbols, potentially enabling an attacker to exit the restricted directory.

Recommendations For IIoT Monitor version 3.1.38, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

BDU:2019-00137

CVE-2018-7835

ZDI-19-020

Produtos afetados

Iiot Monitor

Referências · 6

• https://zerodayinitiative.com/advisories/ZDI-19-020 · Nota de Segurança
• https://schneider-electric.com/en/download/document/SEVD-2018-354-03 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7835 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-00137 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-7835 · Aviso do Fabricante
• http://securityfocus.com/bid/106484 · Nota