Directory Traversal Vulnerability in Ericsson Drutt Mobile Service Delivery Platform
CVE-2015-2166
Currently unrated
Key Information:
- Vendor
Ericsson
- Vendor
- CVE Published:
- 6 April 2015
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 73%
What is CVE-2015-2166?
A directory traversal vulnerability exists in the Instance Monitor component of the Ericsson Drutt Mobile Service Delivery Platform (MSDP) versions 4, 5, and 6. This vulnerability allows remote attackers to bypass access controls and read arbitrary files by exploiting a crafted URI that includes encoded dot-dot-slash sequences. Successful exploitation could lead to unauthorized access to sensitive files, posing a significant risk to affected systems.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.