CVE-2026-5703
2026-10-07
09h17 +00:00
09h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the URL to include a path traversal payload. Successful exploitation of this vulnerability could allow an attacker to access critical system files containing confidential information.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Path Traversal: '.../...//' The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory. |
