CVE-2018-8727CWE-22path-traversal

CVE-2018-8727

High · published June 19, 2018

CVSS v3.0

7.5

EPSS

Percentile

94.8

In the wild

Unconfirmed

What it is

Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system to access files or directories via the Web Client webserver.

The record

Technical detail

CVSS v3.0: 7.5 · HIGH
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.08070 · 94.8th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2018-06-19T23:29Z

Affected products (1)

Product	Versions	Fixed in
mirasys/dvms_workstation	≤ 5.12.6	—

References (3)

https://www.exploit-db.com/exploits/44907 · [email protected]https://www.onvio.nl/nieuws/cve-mirasys-vulnerability · [email protected]https://www.onvio.nl/nieuws/cve-mirasys-vulnerability · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

19 JUN 19:00Z
Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system to access files or directories via the…
cvelistv5