CVE-2021-28485

In Ericsson Mobile Switching Center Server (MSC-S) before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the…

published September 14, 2023

CVSS
—
EPSS
1%
Percentile
51.0
In the wild
Unconfirmed
What it is

In Ericsson Mobile Switching Center Server (MSC-S) before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00662 · 51.0th percentile
Published
2023-09-14T00:00Z
EPSS history
Timeline
  • 14 SEP 00:00Z
    In Ericsson Mobile Switching Center Server (MSC-S) before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the…
    cvelistv5