CVE-2023-0956

TEL-STER TelWin SCADA WebInterface Path Traversal

High · published August 3, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
63.1
In the wild
Unconfirmed
What it is

External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01019 · 63.1th percentile
Published
2023-08-03T18:08Z
EPSS history
Timeline
  • 03 AUG 18:08Z
    TEL-STER TelWin SCADA WebInterface Path Traversal
    cvelistv5