CVE-2023-0113CWE-200

Netis Netcore Router Backup param.file.tgz information disclosure

Medium · published January 7, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

A vulnerability was found in Netis Netcore Router up to 2.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-217591.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00815 · 56.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-01-07T08:22Z
EPSS history
Timeline
  • 07 JAN 08:22Z
    Netis Netcore Router Backup param.file.tgz information disclosure
    cvelistv5