Path Traversal in Sato Cl4nx-J Plus
CVE-2023-5327
A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /rest/dir/. The manipulation of the argument full leads to path traversal. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-241028.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.004 (29.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Sato Cl4nx-j Plus — versions 1.13.2-u455_r2
- Sato Cl4nx-j_plus
- Sato Cl4nx-j_plus_firmware — versions 1.13.2-u455_r2
Weakness classification (CWE)
References
- cna@vuldb.com (technical-description, Third Party Advisory, vdb-entry)
- cna@vuldb.com (signature, permissions-required, Third Party Advisory)
- cna@vuldb.com (Third Party Advisory, exploit)
Frequently asked questions
- What is CVE-2023-5327?
- CVE-2023-5327 is a low-severity vulnerability in Sato Cl4nx-J Plus, classified under Path Traversal. CVSS score: 3.5/10. Published 2023-10-01.
- How severe is CVE-2023-5327?
- Low severity. CVSS v3 base score is 3.5 out of 10.