Unauthenticated Path Traversal Vulnerability in TRCore's DVC
CVE-2024-11310
7.5HIGH
Summary
The DVC product by TRCore is susceptible to a Path Traversal vulnerability, which permits unauthenticated remote attackers to access arbitrary system files. This flaw could lead to serious security breaches, as it enables hackers to read sensitive information stored on the affected systems. Organizations using affected versions of DVC must prioritize remediation efforts to mitigate potential exploitation of this vulnerability.
Affected Version(s)
DVC 6.0 <= 6.3
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved