CVE-2019-9106

The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to execute or include local .php files, as demonstrated by menu=php://filter/convert.base64-encode/resource=index.php to read index.php.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-05-31

Last modified

2024-08-04

Weaknesses

CWE-22

Affected products

• Tebe Small Firmware (Saet)
• Webapp (Saet)

References

• https://members.backbox.org/saet-tebe-small-supervisor-multiple-vulnerabilities/
• https://www.saet.org/wp-content/uploads/2017/04/Depliant_TEBE-TEBE_Small.pdf