Description
NetVision
Information
airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NetVision Information | airPASS | v2.9.0.200703 | v2.9.0.231006 |
References
- https://www.twcert.org.tw/tw/cp-132-7631-c6be3-1.html third-party-advisory