An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in IIoT Monitor 3.1.38 which could allow access to files available to SYSTEM user.
Existe una vulnerabilidad de limitación incorrecta de un nombre de ruta en un directorio restringido ("salto de directorio") en IIoT Monitor 3.1.38, lo que podrÃa permitir el acceso a archivos disponibles para el usuario SYSTEM.
AV:N/AC:L/Au:N/C:C/I:N/A:N
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | COMPLETE |
| Integrity Impact | NONE |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-22
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | iiot_monior | 3.1.38 | <built-in method update of dict object at 0x7e6110a54100> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:iiot_monior:3.1.38:*:*:*:*:*:*:* |