Main
Vulnerability Database
Exploits
ID:1293 - Exploit for Path traversal in Automated Logic Corporation products - CVE-2017-9640
ID:1293 - Exploit for Path traversal in Automated Logic Corporation products - CVE-2017-9640
Published: March 18, 2020
Vulnerability identifier: #VU7997
Vulnerability risk: High
CVE-ID: CVE-2017-9640
CWE-ID: CWE-22
Exploitation vector: Remote access
Vulnerable software:
WebCTRL
i-Vu
SiteScan Web
WebCTRL
i-Vu
SiteScan Web
Link to public exploit:
Vulnerability description
The vulnerability allows a remote authenticated attacker to gain elevated privileges on the target system.
The weakness exists due to path traversal. A remote attacker can overwrite arbitrary files and execute arbitrary code with elevated privileges.
Successful exploitation of the vulnerability may result in system compromise.
The weakness exists due to path traversal. A remote attacker can overwrite arbitrary files and execute arbitrary code with elevated privileges.
Successful exploitation of the vulnerability may result in system compromise.
Remediation
Install updates from vendor's website.