PT-2024-9189 · Unknown · Instant Aos
Published
2024-11-05
·
Updated
2024-11-12
·
CVE-2024-47464
CVSS v3.1
6.8
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Instant AOS versions 8 through 10
Description:
An authenticated Path Traversal issue exists, allowing an attacker to copy arbitrary files to a user-readable location from the command line interface of the underlying operating system. This could lead to remote unauthorized access to files. The vulnerability is related to incorrect restriction of the directory path name with limited access.
Recommendations:
For Instant AOS versions 8 through 10, consider restricting access to the command line interface until a patch is available. As a temporary workaround, limit the ability to copy files to user-readable locations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Instant Aos