CVE-2018-8727 Path traversal in n/a
An attacker can traverse the file system to access unauthorized files or directories via the Web Client webserver in Mirasys DVMS Workstation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-8727?
CVE-2018-8727 is a high-severity path traversal vulnerability in n/a, published on 19 Jun 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system to access files or directories via the Web Client webserver.
Weakness: CWE-22
Which versions are affected by CVE-2018-8727?
It affects 1 product.
Products include Mirasys Dvms Workstation.
How do I fix CVE-2018-8727?
No fix has been published for CVE-2018-8727 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2018-8727 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-8727 exists.
Public exploit code: 1 Nuclei template.
Sources
Also known as GHSA-j23c-2cfm-f3m9.