CVE-2020-17385

Cellopoint CelloOS - Unauthenticated Arbitrary File Disclosure

High · published August 25, 2020

CVSS v3.1
7.5
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal attack and access arbitrate file on the system.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01602 · 75.6th percentile
Published
2020-08-25T07:35Z
EPSS history
Timeline
  • 25 AUG 07:35Z
    Cellopoint CelloOS - Unauthenticated Arbitrary File Disclosure
    cvelistv5