7.5
CVE-2023-6118
- EPSS 0.76%
- Veröffentlicht 23.11.2023 15:15:10
- Zuletzt bearbeitet 20.05.2026 14:16:35
- Erkennungen
LoginPath Traversal in Neutron IP Camera
Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Neutron ≫ Neu-ipb210-28 Firmware Version < b1130.1.0.1
Neutron ≫ Ntl-pt-06wod-3mp Firmware Version < b1130.1.0.1
Neutron ≫ Neu-ipb410-28 Firmware Version < b1130.1.0.1
Neutron ≫ Ntl-bc-01w Firmware Version < b1130.1.0.1
Neutron ≫ Neu-ipbm211 Firmware Version < b1130.1.0.1
Neutron ≫ Ntl-pt-09-wos-3mp Firmware Version < b1130.1.0.1
Neutron ≫ Neu-ipbm411 Firmware Version < b1130.1.0.1
Neutron ≫ Ntl-pt-10-4gwos-3mp Firmware Version < b1130.1.0.1
Neutron ≫ Ipc2224-sr3-npf-36 Firmware Version < b1130.1.0.1
Neutron ≫ Ipc2624-sr3-npf-36 Firmware Version < b1130.1.0.1
Neutron ≫ Ntl-bc-03-snm Firmware Version < b1130.1.0.1
Neutron ≫ Ntl-bc-03-snp Firmware Version < b1130.1.0.1
Neutron ≫ Neu-ipd220-28 Firmware Version < b1130.1.0.1
Neutron ≫ Ntl-bc01-m Firmware Version < b1130.1.0.1
Neutron ≫ Neu-ipdm221 Firmware Version < b1130.1.0.1
Neutron ≫ Neu-ipdm421 Firmware Version < b1130.1.0.1
Neutron ≫ Ntl-ip05-3mp Firmware Version < b1130.1.0.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.76% | 0.505 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| iletisim@usom.gov.tr | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
CWE-25 Path Traversal: '/../filedir'
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize "/../" sequences that can resolve to a location that is outside of that directory.
https://www.usom.gov.tr/bildirim/tr-23-0658
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0658