CVE-2022-37122
high · 7.5A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the 'file' GET parameter through the 'logdownload.cgi' Bash script is not properly verified before being used to download log files. This can be exploited to disclose the contents of arbitrary and sensitive files via directory traversal attacks.
7.5
CVSS
23.1%
EPSS (exploit prob.)
98th
EPSS percentile
2022-08-31
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| carel | pcoweb_card_firmware | >= a2.1.0, <= b.2.1.0 |
| carel | pcoweb_card | all versions |
| carel | applica | 2.154a |
| carel | applica | 16_13020200 |
| carel | pcoweb_hvac_bacnet_gateway | 2.1.0 |
Check a specific version with /api/v1/cve/match.
References
- https://packetstormsecurity.com/files/167684/
- https://www.zeroscience.mk/codes/carelpco_dir.txt
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5709.php
- https://packetstormsecurity.com/files/167684/
- https://www.zeroscience.mk/codes/carelpco_dir.txt
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5709.php
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2022-37122