Directory Traversal Vulnerability in Siemens Automation Controllers

CVE-2017-9947

What is CVE-2017-9947?

A directory traversal flaw has been found in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers that allows a remote attacker with network access to the device's integrated web server to exploit the vulnerability. By leveraging this flaw, an attacker could retrieve sensitive information regarding the internal file system structure of the affected devices, potentially leading to further exploitation or unauthorized access.

References