| Description: | Summary:
Generic check for HTTP directory traversal vulnerabilities on
the web root level of the remote web server.
Vulnerability Impact:
Successfully exploiting this issue may allow an attacker to
access paths and directories that should normally not be accessible by a user. This can result in
effects ranging from disclosure of confidential information to arbitrary code execution.
Affected Software/OS:
The following products are known to be affected by the pattern
checked in this VT:
- No CVEs: Project Jug, Webp Server Go
- CVE-2010-2307: Motorola SURFBoard cable modem SBV6120E
- CVE-2010-4231: Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera
- CVE-2014-2323: Lighttpd
- CVE-2015-2166: Ericsson Drutt MSDP (Instance Monitor)
- CVE-2015-5688: Geddy
- CVE-2017-11456: Geneko GWR router
- CVE-2017-16806: Ulterius Server
- CVE-2018-10201: Ncomputing vSPace Pro 10 and 11
- CVE-2018-10956: IPConfigure Orchid Core VMS 2.0.5
- CVE-2018-14064: uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices
- CVE-2018-18778: mini_httpd
- CVE-2018-19326: Zyxel VMG1312-B10D
- CVE-2018-7490: uWSGI
- CVE-2018-7719: Acrolinx Server
- CVE-2018-8727: Mirasys DVMS Workstation 5.12.6
- CVE-2019-18922: Allied Telesis AT-GS950/8
- CVE-2019-20085: TVT NVMS-1000
- CVE-2019-7315: Genie Access IP Camera
- CVE-2019-9726: Homematic CCU3
- CVE-2020-12447: Onkyo TX-NR585 Web Interface
- CVE-2020-15050: Suprema BioStar2
- CVE-2020-24571: NexusQA NexusDB
- CVE-2020-5410: Spring Cloud Config
- CVE-2021-3019: ffay lanproxy
- CVE-2021-40978: mkdocs 1.2.2 built-in dev-server. Note: This CVE has been disputed by the vendor
because the dev-server is generally seen as being insecure and shouldn't be used in production.
Nevertheless this doesn't make this CVE void so it is included here.
- CVE-2021-41773 and CVE-2021-42013: Apache HTTP Server
- CVE-2022-26233: Barco Control Room Management Suite
- CVE-2022-38794: Zaver
- CVE-2022-45269: Linx Sphere LINX 7.35.ST15
- CVE-2023-22855: Kardex Mlog. Note: The CVE is about a remote code execution (RCE) vulnerability
but the product is also affected by a directory traversal vulnerability and thus the CVE was added
here.
- CVE-2023-46307: etc-browser
- CVE-2024-11303: Korenix JetPort
- CVE-2024-41628: ClusterControl
- CVE-2024-46327: VONETS VAP11G-300 v3.3.23.6.9
- CVE-2024-4956: Nexus Repository Manager 3
- CVE-2024-6049: Lawo AG vsm LTC Time Sync (vTimeSync)
- CVE-2024-6394: parisneo/lollms-webui versions below v9
- CVE-2024-6746: EasySpider 0.6.2
Other products might be affected as well.
Solution:
Contact the vendor for a solution.
CVSS Score:
7.8
CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:N/A:N
|
