CVE-2017-20184

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Carlo Gavazzi Powersoft up to version 2.1.1.1 allows an unauthenticated, remote attacker to download any file from the affected device.

Score

CVSS 3.1 7.5 High

Status

Modified - info@cert.vde.com

Published

2023-05-04

Last modified

2025-01-31

Weaknesses

CWE-22

Affected products

• Powersoft (Carlo Gavazzi)
• Powersoft (Gavazzionline)

References

• https://www.exploit-db.com/exploits/42705