CVE-2023-4152

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesystem of the FDS101 device.

Score

CVSS 3.1 7.5 High

Status

Modified - info@cert.vde.com

Published

2023-09-21

Last modified

2024-09-24

Weaknesses

CWE-22

Affected products

• Fds101 For Fadcfadci (Frauscher)
• Frauscher Diagnostic System 101 (Frauscher)

References

• https://cert.vde.com/en/advisories/VDE-2023-038/