Unauthenticated Path Traversal Vulnerability in TRCore's DVC
CVE-2024-11310

7.5HIGH

Key Information:

Vendor
Trcore
Status
Vendor
CVE Published:
18 November 2024

Summary

The DVC product by TRCore is susceptible to a Path Traversal vulnerability, which permits unauthenticated remote attackers to access arbitrary system files. This flaw could lead to serious security breaches, as it enables hackers to read sensitive information stored on the affected systems. Organizations using affected versions of DVC must prioritize remediation efforts to mitigate potential exploitation of this vulnerability.

Affected Version(s)

DVC 6.0 <= 6.3

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.