Test ID:	1.3.6.1.4.1.25623.1.0.103894
Category:	Web application abuses
Title:	Emerson Network Power Avocent MergePoint Unity 2016 KVM Directory Traversal Vulnerability
Summary:	Emerson Network Power Avocent MergePoint Unity 2016 KVM is prone to a; directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Description:	Summary: Emerson Network Power Avocent MergePoint Unity 2016 KVM is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Vulnerability Insight: Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 (aka MPU2016) KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file. Vulnerability Impact: A remote attacker can exploit this issue to obtain sensitive information that could aid in further attacks. Affected Software/OS: Emerson Network Power Avocent MergePoint Unity 2016 KVM firmware 1.9.16473 is vulnerable. Other versions may also be affected. Solution: Updates are available. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6030 BugTraq ID: 65105 http://www.securityfocus.com/bid/65105 CERT/CC vulnerability note: VU#168751 http://www.kb.cert.org/vuls/id/168751
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.