PT-2022-8603 · Unknown+2 · Platinum Upnp Sdk+2

Pokerfacett · Published 2019-07-22 · Updated 2025-02-13 · CVE-2020-19858

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Platinum Upnp SDK versions prior to 1.2.1

Description The issue allows for a directory traversal attack, which could be exploited by sending a malicious URL, such as "http://ip:port/../privacy.avi", to compromise a victim's privacy. This could potentially allow an attacker to access sensitive information.

Recommendations For Platinum Upnp SDK versions prior to 1.2.1, consider restricting access to sensitive files and directories to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using URLs that contain ../ to prevent directory traversal attacks.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2025-01831

CVE-2020-19858

USN-7266-1

Affected Products

Linuxmint

Platinum Upnp Sdk

Ubuntu

References · 20

• https://github.com/plutinosoft/Platinum/commit/9a4ceaccb1585ec35c45fd8e2585538fff6a865e · Patch
• https://ubuntu.com/security/CVE-2020-35533 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-35532 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-19858 · Security Note
• https://ubuntu.com/security/notices/USN-7266-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-35530 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-19858 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-0691 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-35531 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-19858 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1729 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-01831 · Security Note
• https://osv.dev/vulnerability/USN-7266-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-19858 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-32142 · Vendor Advisory