CVE-2020-25068

Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability

published September 3, 2020

CVSS
—
EPSS
4%
Percentile
90.2
In the wild
Unconfirmed
What it is

Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/file_to_disclose Directory Traversal URI. NOTE: The manufacturer indicated that the affected version does not exist. Furthermore, they indicated that they detected this problem in an internal audit more than 3 years ago and fixed it in 2017.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03899 · 90.2th percentile
Published
2020-09-03T14:30Z
EPSS history
Timeline
  • 03 SEP 14:30Z
    Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability
    cvelistv5