Vulnerability Details CVE-2023-6032
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
vulnerability exists that could cause a file system enumeration and file download when an
attacker navigates to the Network Management Card via HTTPS.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.0%
CVSS Severity
CVSS v3 Score 5.3
References
Products affected by CVE-2023-6032
-
cpe:2.3:h:schneider-electric:galaxy_vl:-
-
cpe:2.3:h:schneider-electric:galaxy_vs:-
-
cpe:2.3:o:schneider-electric:galaxy_vl_firmware:12.21
-
cpe:2.3:o:schneider-electric:galaxy_vs_firmware:6.82