CVE-2024-27575

Description

INOTEC Sicherheitstechnik WebServer CPS220/64 3.3.19 allows a remote attacker to read arbitrary files via absolute path traversal, such as with the /cgi-bin/display?file=/etc/passwd URI.

PUBLISHED Reserved 2024-02-26 | Published 2024-04-04 | Updated 2024-08-02 | Assigner mitre

References

www.inotec-licht.de/

gist.github.com/s4fv4n/098bd368bf054d008078e369108c2ebd

www.inotec-licht.de/

gist.github.com/s4fv4n/098bd368bf054d008078e369108c2ebd

cve.org (CVE-2024-27575)

nvd.nist.gov (CVE-2024-27575)

Download JSON