PT-2018-2184 · Unknown · Iiot Monitor

Published 2018-12-20 · Updated 2019-02-01 · CVE-2018-7835

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIoT Monitor version 3.1.38

Description A Path Traversal vulnerability exists in the software, which could allow access to files available to the SYSTEM user. This issue is related to the lack of filtering of special symbols, potentially enabling an attacker to exit the restricted directory.

Recommendations For IIoT Monitor version 3.1.38, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2019-00137

CVE-2018-7835

ZDI-19-020

Affected Products

Iiot Monitor

References · 6

• https://zerodayinitiative.com/advisories/ZDI-19-020 · Security Note
• https://schneider-electric.com/en/download/document/SEVD-2018-354-03 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7835 · Security Note
• https://bdu.fstec.ru/vul/2019-00137 · Security Note
• https://osv.dev/vulnerability/CVE-2018-7835 · Vendor Advisory
• http://securityfocus.com/bid/106484 · Note