CVE-2012-2560

2022-10-0316:15:36

CWE-22

[email protected]

web.nvd.nist.gov

cve-2012-2560

directory traversal

wellintech kingview

remote attackers

arbitrary files

crafted http request

port 8001

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

67.9%

JSON

Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request to port 8001.

Affected configurations

NVD

Node

wellintechkingviewRange≤6.53

wellintechkingviewMatch3.0

wellintechkingviewMatch6.5.30.2010.18018

wellintechkingviewMatch6.52

wellintechkingviewMatch65.30.2010.18018

wellintechkingviewMatch65.30.17249

CPENameOperatorVersion
wellintech:kingviewwellintech kingviewle6.53
wellintech:kingviewwellintech kingvieweq3.0
wellintech:kingviewwellintech kingvieweq6.5.30.2010.18018
wellintech:kingviewwellintech kingvieweq6.52
wellintech:kingviewwellintech kingvieweq65.30.2010.18018
wellintech:kingviewwellintech kingvieweq65.30.17249

CPE	Name	Operator	Version
wellintech:kingview	wellintech kingview	le	6.53
wellintech:kingview	wellintech kingview	eq	3.0
wellintech:kingview	wellintech kingview	eq	6.5.30.2010.18018
wellintech:kingview	wellintech kingview	eq	6.52
wellintech:kingview	wellintech kingview	eq	65.30.2010.18018
wellintech:kingview	wellintech kingview	eq	65.30.17249