CVE-2016-20104
CVE-2016-20104 · EyeLock nano NXT 3.05.1193 Path Traversal via logdownload.php
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the 'path' parameter. Attackers can send GET requests to /scripts/logdownload.php with traversal sequences like ../../etc/passwd, which readfile() returns unvalidated, disclosing local system files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.
CVSS 8.7 · Alta · EPSS 0,6%
- Publicación
- Actualización
Productos y versiones afectados
nano nxt
- Versiones
- 3.05.1193: Afectada (custom)
- 3.04.1108: Afectada (custom)
- 3.03.944: Afectada (custom)
- 3.01.646: Afectada (custom)
Sin corrección publicada
Fuentes originales
- https://www.zeroscience.mk/advisories/ZSL-2016-5356.html
- https://www.exploit-db.com/exploits/40227
- https://packetstorm.news/files/id/138274/
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/eyelock-nano-lfd.yaml
- https://www.vulncheck.com/advisories/eyelock-nano-nxt-3.05.1193-path-traversal-via-logdownload-php
- https://nvd.nist.gov/vuln/detail/CVE-2016-20104