Path Traversal in Macgregor Interschalt_vdr_g4e
CVE-2016-9339
An issue was discovered in INTERSCHALT Maritime Systems VDR G4e Versions 5.220 and prior. External input is used to construct paths to files and directories without properly neutralizing special elements within the pathname that could allo…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.011 (78.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Macgregor Interschalt_vdr_g4e
- Macgregor Interschalt_vdr_g4e_firmware
- N/a Interschalt Vdr G4e 5.220 And Prior — versions INTERSCHALT VDR G4e 5.220 and prior
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2016-9339?
- CVE-2016-9339 is a medium-severity vulnerability in Macgregor Interschalt_vdr_g4e, classified under Path Traversal. CVSS score: 5.3/10. Published 2017-02-13.
- How severe is CVE-2016-9339?
- Medium severity. CVSS v3 base score is 5.3 out of 10.