CVE-2016-20104
CVE-2016-20104 · EyeLock nano NXT 3.05.1193 Path Traversal via logdownload.php
This page contains facts from public vulnerability sources. Check the original advisory before updating.
EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the 'path' parameter. Attackers can send GET requests to /scripts/logdownload.php with traversal sequences like ../../etc/passwd, which readfile() returns unvalidated, disclosing local system files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.
CVSS 8.7 · High · EPSS 0.4%
- Published
- Updated
Affected products and versions
nano nxt
- Versions
- 3.05.1193: Affected (custom)
- 3.04.1108: Affected (custom)
- 3.03.944: Affected (custom)
- 3.01.646: Affected (custom)
No fix published
Original sources
- https://www.zeroscience.mk/advisories/ZSL-2016-5356.html
- https://www.exploit-db.com/exploits/40227
- https://packetstorm.news/files/id/138274/
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/eyelock-nano-lfd.yaml
- https://www.vulncheck.com/advisories/eyelock-nano-nxt-3.05.1193-path-traversal-via-logdownload-php
- https://nvd.nist.gov/vuln/detail/CVE-2016-20104