Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Carlo Gavazzi Powersoft up to version 2.1.1.1 allows an unauthenticated, remote attacker to download any file from the affected device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Carlo Gavazzi | Powersoft | ≤ 2.1.1.1 | — |
Advisories 1
- ICSA-23-138-01 Carlo Gavazzi Powersoft CISA ICS & IT advisories · May 18, 2023