Directory Traversal Vulnerability in SolarView Compact by SolarView
CVE-2023-40924

7.5HIGH

Key Information:

Vendor

Contec

Status
Solarview Compact Firmware
Vendor
CVE Published:
8 September 2023

Badges

👾 Exploit Exists

What is CVE-2023-40924?

The SolarView Compact product, specifically versions prior to 6.00, is susceptible to a directory traversal vulnerability. This flaw allows unauthorized access to sensitive files and directories on the server, potentially exposing critical system information and configuration files. Attackers can exploit this vulnerability to manipulate file paths and retrieve arbitrary files from the system, which could lead to further attacks or data breaches. It is crucial for users to upgrade to the latest version to mitigate this risk.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-33620
https://github.com/Yobing1/CVE-2023-40924/blob/main/READM...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

.