PT-2020-7729 · Farlinx · Farlinx X25 Gateway

Eldar Marcussen + 1 · Published 2020-06-01 · Updated 2020-06-02 · CVE-2014-7174

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions FarLinX X25 Gateway versions through 2014-09-25

Description The issue allows directory traversal via the log-handling feature.

Recommendations For versions through 2014-09-25, consider disabling the log-handling feature as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-7174

Affected Products

Farlinx X25 Gateway

References · 3

• 🔥 https://justanotherhacker.com/2016/09/jahx164_-_farlinx_x25_gateway_multiple_vulnerabilities.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-7174 · Security Note
• https://t.me/cibsecurity/12480 · Telegram Post