CVE-2023-37607

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-37607
Directory Traversal in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive information via csvServer.php?file= with a .. in the dir parameter.

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
http://automatic-systems.com
http://soc.com
https://github.com/CQURE/CVEs/blob/main/CVE-2023-37607/README.md Exploit Third Party Advisory
https://github.com/CQURE/CVEs/blob/main/CVE-2023-37607/README.md Exploit Third Party Advisory
https://www.automatic-systems.com/range/
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:automaticsystems:soc_fl9600_firstlane_firmware:06:*:*:*:*:*:*:*
cpe:2.3:h:automaticsystems:soc_fl9600_firstlane:-:*:*:*:*:*:*:*
History

03 Jun 2025, 15:15

Type Values Removed Values Added
References
  • () http://automatic-systems.com -
  • () http://soc.com -

31 Oct 2024, 04:15

Type Values Removed Values Added
Summary Directory Traversal in Automatic-Systems SOC FL9600 FastLine lego_T04E00 allows a remote attacker to obtain sensitive information. Directory Traversal in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive information via csvServer.php?file= with a .. in the dir parameter.
References
  • {'url': 'http://soc.com', 'name': 'http://soc.com', 'tags': ['Permissions Required'], 'refsource': ''}
  • {'url': 'http://automatic-systems.com', 'name': 'http://automatic-systems.com', 'tags': ['Product'], 'refsource': ''}
  • () https://www.automatic-systems.com/range/ -

09 Jan 2024, 20:34

Type Values Removed Values Added
CWE CWE-22
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
CPE cpe:2.3:h:automaticsystems:soc_fl9600_firstlane:-:*:*:*:*:*:*:*
cpe:2.3:o:automaticsystems:soc_fl9600_firstlane_firmware:06:*:*:*:*:*:*:*
First Time Automaticsystems soc Fl9600 Firstlane
Automaticsystems
Automaticsystems soc Fl9600 Firstlane Firmware
References () http://soc.com - () http://soc.com - Permissions Required
References () http://automatic-systems.com - () http://automatic-systems.com - Product
References () https://github.com/CQURE/CVEs/blob/main/CVE-2023-37607/README.md - () https://github.com/CQURE/CVEs/blob/main/CVE-2023-37607/README.md - Exploit, Third Party Advisory

03 Jan 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-01-03 14:15

Updated : 2025-06-03 15:15

NVD link : CVE-2023-37607

Mitre link : CVE-2023-37607

JSON object : View

Products Affected

automaticsystems

  • soc_fl9600_firstlane_firmware
  • soc_fl9600_firstlane
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')