CVE-2022-37122

Severity CVSS v4.0:

Pending analysis

Type:

CWE-22 Path Traversal

Publication date:

31/08/2022

Last modified:

08/09/2022

Description

Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the &#39;file&#39; GET parameter through the &#39;logdownload.cgi&#39; Bash script is not properly verified before being used to download log files. This can be exploited to disclose the contents of arbitrary and sensitive files via directory traversal attacks.

Impact

Vector 3.x

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS v3.1 Severity and Metrics:

Base Score: 7.50 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope (S): Unchanged
Confidentiality (C): High
Integrity (I): None
Availability (A): None

Base Score 3.x

7.50

Severity 3.x

HIGH

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:o:carel:pcoweb_card_firmware::::::::	a2.1.0 (including)	b.2.1.0 (including)
cpe:2.3:h:carel:pcoweb_card:-:::::::*
cpe:2.3:a:carel:applica:2.154a:::::::*
cpe:2.3:a:carel:applica:16_13020200:::::::*
cpe:2.3:a:carel:pcoweb_hvac_bacnet_gateway:2.1.0:::::::*

To consult the complete list of CPE names with products and versions, see this page

CVE-2022-37122

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools