PT-2023-16021 · Netis · Netis Netcore Router

C4Ng4C3Ir0 · Published 2023-01-07 · Updated 2024-05-17 · CVE-2023-0113

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netis Netcore Router versions up to 2.2.6

Description A vulnerability was found in the Netis Netcore Router, affecting an unknown functionality of the file param.file.tgz of the component Backup Handler. This leads to information disclosure and can be launched remotely.

Recommendations For versions up to 2.2.6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2023-0113

Affected Products

Netis Netcore Router

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-0113 · Security Note
• https://t.me/cvenotify/41472 · Telegram Post
• https://vuldb.com/?id.217591 · Note
• https://vuldb.com/?ctiid.217591 · Note
• https://t.me/cibsecurity/56108 · Telegram Post
• https://t.me/cvenotify/41945 · Telegram Post