Description
Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the download_debuglog_file.php endpoint used for Debug Logs downloads. An unauthenticated attacker can manipulate the name parameter to read arbitrary files outside the intended directory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Intrado | 911 Emergency Gateway | Versions 7.x, Versions 6.x, Versions 5.x | — |
Advisories 1
- ICSA-26-113-06 Intrado 911 Emergency Gateway (EGW) CISA ICS & IT advisories · Apr 23, 2026