CVE-2019-18338CWE-23

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0)

High · published December 12, 2019

CVSS v3.1
7.7
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains a directory traversal

vulnerability in its XML-based communication protocol as provided by default

on ports 5444/tcp and 5440/tcp.

An authenticated remote attacker with network access to the CCS server

could exploit this vulnerability to list arbitrary directories

or read files outside of the CCS application context.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:F/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.02647 · 85.5th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2019-12-12T19:08Z
EPSS history
Timeline
  • 12 DEC 19:08Z
    A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0)
    cvelistv5