CVE-2023-37607

2024-01-0314:15:08

CWE-22

[email protected]

web.nvd.nist.gov

cve-2023-37607

remote attacker

sensitive information

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

52.0%

JSON

Directory Traversal in Automatic-Systems SOC FL9600 FastLine lego_T04E00 allows a remote attacker to obtain sensitive information.

Affected configurations

Nvd

Node

automaticsystemssoc_fl9600_firstlane_firmwareMatch06

AND

automaticsystemssoc_fl9600_firstlaneMatch-

VendorProductVersionCPE
automaticsystemssoc_fl9600_firstlane_firmware06cpe:2.3:o:automaticsystems:soc_fl9600_firstlane_firmware:06:*:*:*:*:*:*:*
automaticsystemssoc_fl9600_firstlane-cpe:2.3:h:automaticsystems:soc_fl9600_firstlane:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
automaticsystems	soc_fl9600_firstlane_firmware	06	cpe:2.3:o:automaticsystems:soc_fl9600_firstlane_firmware:06:::::::*
automaticsystems	soc_fl9600_firstlane	-	cpe:2.3:h:automaticsystems:soc_fl9600_firstlane:-:::::::*