Skip to content
OpenAdvisories
High ICSA-23-138-01 1 CVE

Carlo Gavazzi Powersoft

Published May 18, 2023 · Updated May 18, 2023

Vendor: Carlo Gavazzi Automation Product: Powersoft

Summary

Successful exploitation of this vulnerability could allow an attacker to access and retrieve any file from the server.

Vulnerabilities 1

  • High 7.5
    CVE-2017-20184

    Carlo Gavazzi Powersoft prone to Path Traversal

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Carlo Gavazzi Powersoft up to version 2.1.1.1 allows an unauthenticated, remote attacker to download any file from the affected device.

    Carlo Gavazzi Automation Powersoft

Revision history

  1. #1

    CSAF Creation Date

References