Arbitrary file deletion

2019-09-2019:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.4%

JSON

An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. The web interface of the product has a local file inclusion vulnerability. An attacker with administrative privileges can craft a special URL to read arbitrary files from the device’s files system.

CPENameOperatorVersion
net-g5_firmwareeq5.2.2

CPE	Name	Operator	Version
	net-g5_firmware	eq	5.2.2

References

mezdanak.de/2019/06/21/iot-full-disclosure-topcon-positioning-net-g5-receiver/