Carel pCOWeb HVAC BACnet Gateway...

- AV AC AU C I A
发布: 2022-07-01
修订: 2022-04-29

Carel pCOWeb HVAC BACnet Gateway version 2.1.0 suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the file GET parameter through the logdownload.cgi bash script is not properly verified before being used to download log files. This can be exploited to disclose the contents of arbitrary and sensitive files via directory traversal attacks.

0%
当前有1条漏洞利用/PoC
当前有0条受影响产品信息