Path Traversal in Ids Rtu 850c

CVE-2015-3939

Directory traversal vulnerability in the NC854 and NC856 modules for IDS RTU 850C devices allows remote authenticated users to read arbitrary files via unspecified vectors involving an internal web server, as demonstrated by reading a TELNET credentials file.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.026 (83.8th percentile) — read the EPSS interpretation.

Affected products

Ids Ids_rtu_850c
Ids Nc854
Ids Nc856
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
ics-cert@hq.dhs.gov (vdb-entry, x_refsource_BID)