PT-2024-24211 · Unknown · Nexsys-One

Ahmed Kameran · Published 2024-04-29 · Updated 2024-07-03 · CVE-2024-31801

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NEXSYS-ONE versions prior to v.Rev.15320

Description The issue allows a remote attacker to obtain sensitive information via a crafted request. This is a result of a Directory Traversal vulnerability.

Recommendations For versions prior to v.Rev.15320, upgrade to v15320 or later to fix the issue. Additionally, audit the system for unauthorized access to ensure no malicious activity has occurred.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-31801

Affected Products

Nexsys-One

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-31801 · Security Note
• https://twitter.com/hamoshwani/status/1785236835062399165 · Twitter Post
• https://twitter.com/oktsec/status/1785180498752352366 · Twitter Post
• https://t.me/cvenotify/78468 · Telegram Post
• https://gist.github.com/hamoshwani/6e207aa4ea513438cd75b97c1fc8abfe · Note
• https://dishdev.nexsysone.com/nexsysonev3 · Note
• https://nexsysone.com · Note