Description
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Contec | FXA5000 | < 1.12.00 | 1.12.00 |
| Contec | FXA5020 | < 1.12.00 | 1.12.00 |
| Contec | FXA5020-[][] | < 1.12.00 | 1.12.00 |
| Contec | FXE5000 | < 1.12.00 | 1.12.00 |
| Contec | FXE5000-[][] | < 1.12.00 | 1.12.00 |
| Contec | FXS5000-[][] | < 1.12.00 | 1.12.00 |
| Contec | FXS5021 | < 1.12.00 | 1.12.00 |
| Contec | FXE4000 | < 1.14.00 | 1.14.00 |
| Contec | FXE4000-WP | < 1.14.00 | 1.14.00 |
| Contec | FXS4000 | < 1.14.00 | 1.14.00 |
| Contec | FXS4020 | < 1.14.00 | 1.14.00 |
| Contec | FXA3000 | < 1.20.00 | 1.20.00 |
| Contec | FXA3000-[][] | < 1.20.00 | 1.20.00 |
| Contec | FXA3020 | < 1.20.00 | 1.20.00 |
| Contec | FXA3020-[][] | < 1.20.00 | 1.20.00 |
| Contec | FXA3200 | < 1.20.00 | 1.20.00 |
| Contec | FXE3000 | < 1.20.00 | 1.20.00 |
| Contec | FXE3000-[][] | < 1.20.00 | 1.20.00 |
| Contec | FXE3000-WP | < 1.20.00 | 1.20.00 |
| Contec | FXS300[]-CN | < 1.20.00 | 1.20.00 |