Path Traversal in Wellintech Kingview
CVE-2012-2560
Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request to port 8001.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.003 (52.1th percentile) — read the EPSS interpretation.
Affected products
- Wellintech Kingview — versions 3.0, 6.5.30.2010.18018, 6.52
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (US Government Resource, x_refsource_MISC)
- cret@cert.org (x_refsource_CONFIRM, Patch, Vendor Advisory)