Path Traversal in Macgregor Interschalt Vdr G4e
CVE-2016-9339
An issue was discovered in INTERSCHALT Maritime Systems VDR G4e Versions 5.220 and prior. External input is used to construct paths to files and directories without properly neutralizing special elements within the pathname that could allow an attacker to read files on the system, a Path Traversal.
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
EPSS exploit prediction
EPSS: 0.017 (76.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 76th percentile — 76.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.017 · newest: 0.017 · change: 0.000
Affected products
- Macgregor Interschalt Vdr G4e
- Macgregor Interschalt Vdr G4e Firmware
- Interschalt Vdr G4e 5.220 And Prior — versions INTERSCHALT VDR G4e 5.220 and prior
Weakness classification (CWE)
References
- www.securityfocus.com/bid/94776 (VDB Entry, Third Party Advisory, vdb-entry)
- ics-cert.us-cert.gov/advisories/ICSA-16-343-04 (US Government Resource, Third Party Advisory)
Frequently asked questions
- What is CVE-2016-9339?
- CVE-2016-9339 is a medium-severity vulnerability in Macgregor Interschalt Vdr G4e, classified under Path Traversal. CVSS score: 5.3/10. Published 2017-02-13.
- How severe is CVE-2016-9339?
- Medium severity. CVSS v3 base score is 5.3 out of 10.