Description (CNA)
Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attackers to read configuration and security parameters on Teledyne FLIR PackBot and FirstLook robots running this software via path traversal.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Teledyne FLIR / Aware2 | affected 0 through 6.9.0.2; affected 0 through 1.7.9 |
CWE
CWE-22
References
ADP enrichment
No English description supplied.
No references supplied.