Vulnerability Details CVE-2023-37607
Directory Traversal in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive information via csvServer.php?file= with a .. in the dir parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.8%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2023-37607
-
cpe:2.3:h:automaticsystems:soc_fl9600_firstlane:-
-
cpe:2.3:o:automaticsystems:soc_fl9600_firstlane_firmware:06