CVE-2023-2880 — Frauscher Sensortechnik Diagnostic System FDS001 for FAdC/FAdCi Path Traversal vulnerability

CVE-2023-2880

Frauscher Sensortechnik Diagnostic System FDS001 for FAdC/FAdCi Path Traversal vulnerability PUBLISHED

Description (CNA)

Frauscher Sensortechnik GmbH FDS001 for FAdC/FAdCi v1.3.3 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesystem of the FDS001 device.

Affected (CNA)

Vendor / product	Versions
Frauscher Sensortechnik / Diagnostic System FDS101 for FAdC/FAdCi	affected 0 through 1.3.3

CWE

CWE-22

References

https://cert.vde.com/en/advisories/VDE-2023-011/

ADP enrichment

CVE

No English description supplied.

https://cert.vde.com/en/advisories/VDE-2023-011/

CISA-ADP

No English description supplied.

No references supplied.