Lucene search

IcscertCVE-2016-9339

HistoryFeb 13, 2017 - 9:59 p.m.

CVE-2016-9339

2017-02-1321:59:01

CWE-22

icscert

web.nvd.nist.gov

interschalt

maritime systems

vdr g4e

cve-2016-9339

path traversal

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

29.0%

JSON

An issue was discovered in INTERSCHALT Maritime Systems VDR G4e Versions 5.220 and prior. External input is used to construct paths to files and directories without properly neutralizing special elements within the pathname that could allow an attacker to read files on the system, a Path Traversal.

Affected configurations

Nvd

Node

macgregorinterschalt_vdr_g4e_firmwareRange≤5.220

AND

macgregorinterschalt_vdr_g4eMatch-

VendorProductVersionCPE
macgregorinterschalt_vdr_g4e_firmware*cpe:2.3:o:macgregor:interschalt_vdr_g4e_firmware:*:*:*:*:*:*:*:*
macgregorinterschalt_vdr_g4e-cpe:2.3:h:macgregor:interschalt_vdr_g4e:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
macgregor	interschalt_vdr_g4e_firmware	*	cpe:2.3:o:macgregor:interschalt_vdr_g4e_firmware::::::::
macgregor	interschalt_vdr_g4e	-	cpe:2.3:h:macgregor:interschalt_vdr_g4e:-:::::::*

CNA Affected

[
  {
    "product": "INTERSCHALT VDR G4e 5.220 and prior",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "INTERSCHALT VDR G4e 5.220 and prior"
      }
    ]
  }
]

References

www.securityfocus.com/bid/94776

ics-cert.us-cert.gov/advisories/ICSA-16-343-04

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

29.0%

JSON

Related for CVE-2016-9339