Directory Traversal Vulnerability in WellinTech KingView Products
CVE-2012-2560

Currently unrated

Key Information:

Vendor

Wellintech

Status
Kingview
Vendor
CVE Published:
5 July 2012

What is CVE-2012-2560?

A directory traversal vulnerability in WellinTech's KingView version 6.53 enables remote attackers to exploit improper input validation, allowing unauthorized access to arbitrary files on the server. By crafting a malicious HTTP request to port 8001, attackers can read sensitive files, potentially leading to further system compromise. Users are advised to implement the necessary security patches provided by WellinTech to mitigate this risk.

References

http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01...
x_refsource_MISC
http://www.wellintech.com/index.php/news/33-patch-for-kin...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.