SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2010-0348

Directory traversal vulnerability in C3 Corp.

MEDIUM 5.0EPSS 1.56%

Does this matter?

Lower severity and a low EPSS score (1.56%). Track it; it rarely justifies an emergency change on its own.

Description

Directory traversal vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to read arbitrary files via unknown vectors.

CVSS 2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
1.56% probability · 74th percentile
CISA KEV
Not listed
Weakness
CWE-22
Affected
c-3.co.jp/webcalenderc3
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.