PT-2023-31407 · Mcl-Net · Mcl-Net

Publicado 2023-10-11 · Atualizado 2023-10-16 · CVE-2023-4990

Positive Technologies (AI Summary)

CVSS v3.1

8.3

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions MCL-Net versions prior to 4.6 Update Package (P01)

Description A directory traversal issue may allow attackers to read arbitrary files.

Recommendations For MCL-Net versions prior to 4.6 Update Package (P01), update to version 4.6 Update Package (P01) or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-4990

Produtos afetados

Mcl-Net

Referências · 4

• https://mcl-mobilityplatform.com/downloads.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-4990 · Nota de Segurança
• https://t.me/cibsecurity/72069 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-4990 · Aviso do Fabricante