PT-2022-20609 · Unknown · Softguard Web

Philipp Espernberger · Published 2022-07-17 · Updated 2022-07-21 · CVE-2022-31202

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SoftGuard Web (SGW) versions prior to 5.1.5

Description The issue allows directory traversal, enabling the reading of arbitrary local files via the export function or man.tcl.

Recommendations For versions prior to 5.1.5, update to version 5.1.5 or later to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-31202

Affected Products

Softguard Web

References · 4

• 🔥 https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-softguard-network-management-extension-snmp · Exploit
• https://osv.dev/vulnerability/CVE-2022-31202 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31202 · Security Note
• https://t.me/cibsecurity/46410 · Telegram Post