PT-2017-10088 · Fidelix · Fidelix Fx-20 Series Controllers

Semen Rozhkov · Published 2017-02-13 · Updated 2017-02-23 · CVE-2016-9364

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Fidelix FX-20 series controllers versions prior to 11.50.19

Description An issue allows arbitrary file reading via path traversal, enabling an attacker to access arbitrary files and directories on the server.

Recommendations For versions prior to 11.50.19, update to version 11.50.19 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2016-9364

Affected Products

Fidelix Fx-20 Series Controllers

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-9364 · Security Note
• https://osv.dev/vulnerability/CVE-2016-9364 · Vendor Advisory
• http://securityfocus.com/bid/95073 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-357-01 · Note