Vulnerability Details CVE-2023-49960
In Indo-Sol PROFINET-INspektor NT through 2.4.0, a path traversal vulnerability in the httpuploadd service of the firmware allows remote attackers to write to arbitrary files via a crafted filename parameter in requests to the /upload endpoint.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.0%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2023-49960
-
cpe:2.3:h:indu-sol:profinet-inspektor_nt:-
-
cpe:2.3:o:indu-sol:profinet-inspektor_nt_firmware:*