Path Traversal in Sato Cl4nx-J Plus
CVE-2023-5327
A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /rest/dir/. The manipulation of the argument full leads to path traversal. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-241028.
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.
EPSS exploit prediction
EPSS: 0.004 (27.9th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 28th percentile — 27.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: -0.000
Affected products
- Sato Cl4nx-J Plus — versions 1.13.2-u455_r2
- Sato Cl4nx-J Plus
- Sato Cl4nx-J Plus Firmware — versions 1.13.2-u455_r2
Weakness classification (CWE)
References
- vuldb.com/ (technical-description, Third Party Advisory, vdb-entry)
- vuldb.com/ (signature, permissions-required, Third Party Advisory)
- github.com/CV3TR4CK/CV3Cyb3R/blob/main/2023/SATO CL4NX-J Plus dir/README.md (Third Party Advisory, exploit)
Frequently asked questions
- What is CVE-2023-5327?
- CVE-2023-5327 is a low-severity vulnerability in Sato Cl4nx-J Plus, classified under Path Traversal. CVSS score: 3.5/10. Published 2023-10-01.
- How severe is CVE-2023-5327?
- Low severity. CVSS v3 base score is 3.5 out of 10.