CVE-2020-7535CWE-22

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon…

published December 11, 2020

CVSS
—
EPSS
1%
Percentile
74.0
In the wild
Unconfirmed
What it is

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could cause disclosure of information when sending a specially crafted request to the controller over HTTP.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01494 · 74.0th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2020-12-11T00:51Z
EPSS history
Timeline
  • 11 DEC 00:51Z
    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' Vulnerability Type) vulnerability exists in the Web Server on Modicon…
    cvelistv5