Description (CNA)
Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the download_debuglog_file.php endpoint used for Debug Logs downloads. An unauthenticated attacker can manipulate the name parameter to read arbitrary files outside the intended directory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Intrado / 911 Emergency Gateway | affected Versions 7.x; affected Versions 6.x; affected Versions 5.x |
CWE
CWE-35
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-06
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-06.json
ADP enrichment
No English description supplied.
No references supplied.