PT-2024-5723 · Fujitsu · Fujitsu Network Edgiot Gw1500

Eddy Huynh + 1 · Published 2024-07-16 · Updated 2024-10-29 · CVE-2024-40617

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS) versions not specified

Description The issue is related to a path traversal vulnerability, which may allow a remote attacker with User Class privilege to access restricted files containing sensitive information by sending a specially crafted request to the affected product. This could potentially lead to the hijacking of Administrator Class privileges of the product.

Recommendations For FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS), consider restricting access to sensitive files and directories to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the affected product with User Class privilege until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2024-06436

CVE-2024-40617

Affected Products

Fujitsu Network Edgiot Gw1500

References · 11

• 🔥 https://github.com/KyssK00L/CVE-2024-40617 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-40617 · Security Note
• https://bdu.fstec.ru/vul/2024-06436 · Security Note
• https://osv.dev/vulnerability/CVE-2024-40617 · Vendor Advisory
• https://jvn.jp/en/jp/JVN25583987 · Note
• https://cybersecurity-help.cz/vdb/SB2024071642 · Note
• https://vuldb.com/ru/?id.271808 · Note
• https://t.me/cvenotify/93952 · Telegram Post
• https://t.me/cvedetector/1068 · Telegram Post
• https://sploitus.com/exploit?id=D5952BBB-268F-5DA9-B2B0-B82FC87FF7E5 · Note
• https://fenics.fujitsu.com/networkservice/m2m/download/update-m.html · Note