PT-2023-31407 · Mcl-Net · Mcl-Net

Published 2023-10-11 · Updated 2023-10-16 · CVE-2023-4990

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions MCL-Net versions prior to 4.6 Update Package (P01)

Description A directory traversal issue may allow attackers to read arbitrary files.

Recommendations For MCL-Net versions prior to 4.6 Update Package (P01), update to version 4.6 Update Package (P01) or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-4990

Affected Products

Mcl-Net

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-4990 · Security Note
• https://osv.dev/vulnerability/CVE-2023-4990 · Vendor Advisory
• https://mcl-mobilityplatform.com/downloads.php · Note
• https://t.me/cibsecurity/72069 · Telegram Post