Skip to content
OpenAdvisories
High · 7.5 CVE-2020-12508 EUVD-2020-4810GHSA-h9m7-7fr7-xhf5

s::can moni::tools prone to path traversal in image-relocator module

Published Nov 7, 2022 · Updated May 1, 2025 · Assigned by CERTVDE

Description

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module.

Affected products

VendorProductAffectedFixed
s::can moni::tools 1.0 – < 4.2 4.2

References