VulnerabilityModified
CVE-2011-4716
Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter.
MEDIUM 5.0EPSS 3.08%
Does this matter?
Lower severity and a low EPSS score (3.08%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 3.08% probability · 87th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- dream-multimedia-tv/dreambox dm800 hd se firmware · dream-multimedia-tv/dreambox dm800 hd se · dream-multimedia-tv/dreambox dm800 hd pvr firmware · dream-multimedia-tv/dreambox dm800 hd pvr
- Source
- cve@mitre.org
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.