CVE-2017-20184

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-20184
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Carlo Gavazzi Powersoft up to version 2.1.1.1 allows an unauthenticated, remote attacker to download any file from the affected device.
CVSS

No CVSS.

References
Link Resource
https://www.exploit-db.com/exploits/42705 Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/42705 Exploit Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:gavazzionline:powersoft:*:*:*:*:*:*:*:*
History

31 Jan 2025, 18:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.5 		v2 : unknown
v3 : unknown
References (MISC) https://www.exploit-db.com/exploits/42705 - Exploit, Third Party Advisory, VDB Entry () https://www.exploit-db.com/exploits/42705 - Exploit, Third Party Advisory, VDB Entry

10 May 2023, 18:06

Type Values Removed Values Added
References (MISC) https://www.exploit-db.com/exploits/42705 - (MISC) https://www.exploit-db.com/exploits/42705 - Exploit, Third Party Advisory, VDB Entry
First Time Gavazzionline powersoft
Gavazzionline
CPE cpe:2.3:a:gavazzionline:powersoft:*:*:*:*:*:*:*:*

04 May 2023, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-05-04 10:15

Updated : 2025-01-31 18:15

NVD link : CVE-2017-20184

Mitre link : CVE-2017-20184

JSON object : View

Products Affected

gavazzionline

  • powersoft
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')