Description (CNA)
A low privileged remote attacker can upload a new or overwrite an existing python script by using a path traversal of the target filename in php resulting in a remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| METZ CONNECT / Energy-Controlling EWIO2-M | affected 0.0.0 before 2.2.0 |
| METZ CONNECT / Energy-Controlling EWIO2-M-BM | affected 0.0.0 before 2.2.0 |
| METZ CONNECT / Ethernet-IO EWIO2-BM | affected 0.0.0 before 2.2.0 |
CWE
CWE-35
References
ADP enrichment
No English description supplied.
No references supplied.