NetVision Information airPASS - Path Traversal

CVE-2023-48383

What is CVE-2023-48383?

The airPASS product from NetVision is susceptible to a path traversal vulnerability due to insufficient input validation in specific URL parameters. This flaw enables an unauthenticated remote attacker to bypass standard authentication mechanisms, potentially leading to unauthorized access to arbitrary system files. Exploitation of this vulnerability could expose sensitive information, presenting significant risks to users and organizations relying on the security of the airPASS solution.

References