SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2003-0338

Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via ..

MEDIUM 5.0EPSS 3.03%

Does this matter?

Lower severity and a low EPSS score (3.03%). Track it; it rarely justifies an emergency change on its own.

Description

Directory traversal vulnerability in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allows remote attackers to read and execute arbitrary files via .. (dot dot) sequences in HTTP GET or POST requests.

CVSS 2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
3.03% probability · 87th percentile
CISA KEV
Not listed
Affected
wsmp3/wsmp3 daemon · wsmp3/wsmp3 web server
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.