Skip to content
OpenAdvisories
Medium ICSA-24-149-01 2 CVEs

Campbell Scientific CSI Web Server

Published May 28, 2024 · Updated May 28, 2024

Vendor: Campbell Scientific Product: CSI Web Server Product: RTMC Pro

Summary

Successful exploitation of these vulnerabilities could allow an attacker to download files and decode stored passwords.

Vulnerabilities 2

  • Medium 6.9
    CVE-2024-5434

    Weak Encoding for Password vulnerability in Campbell Scientific CSI Web Server and RTMC

    The Campbell Scientific CSI Web Server stores web authentication credentials in a file with a specific file name. Passwords within that file are stored in a weakly encoded format. There is no known way to remotely access the file unless it has been manually r…

    Campbell Scientific CSI Web Server and RTMC
  • Medium 5.3
    CVE-2024-5433

    Path Traversal in Campbell Scientific CSI Web Server and RTMC

    The Campbell Scientific CSI Web Server supports a command that will return the most recent file that matches a given expression. A specially crafted expression can lead to a path traversal vulnerability. This command combined with a specially crafted expressi…

    Campbell Scientific CSI Web Server and RTMC

Revision history

  1. #1

    Initial Publication

References