Description
An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Contec | M2M Gateway Integrated Type CPS-MG341* | < 4.1.0 | 4.1.0 |
| Contec | M2M Gateway Configurable type CPS-MGS341* | < 4.1.0 | 4.1.0 |
| Contec | M2M Controller Integrated Type CPS-MC341 | < 4.1.0 | 4.1.0 |
| Contec | M2M Controller Configurable type CPS-MCS341* | < 4.1.0 | 4.1.0 |