CVE-2021-36717

Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the "Name" parameter, the attacker can return to the root directory and open the host file. This might give the attacker the ability to view restricted files, which could provide the attacker with more information required to further compromise the system.

Score

CVSS 3.1 7.5 High

Status

Modified - cna@cyber.gov.il

Published

2021-09-07

Last modified

2024-08-04

Weaknesses

CWE-22

Affected products

• Timenet (Synerion)
• Timenet Version (Synerion)

References

• https://www.gov.il/en/departments/faq/cve_advisories