Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-27776 EUVD-2024-24969GHSA-g93h-34rm-55x7

MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Published Jun 2, 2024 · Updated Aug 2, 2024 · Assigned by INCD

Vendor: Milesight Product: DeviceHub

Description

MileSight DeviceHub -

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE

Affected products

VendorProductAffectedFixed
MileSight DeviceHub v3.0.1-r1 for Ubuntu 20.04 – < Upgrade to the latest version. Upgrade to the latest version.

References