VulnerabilityModified
CVE-2012-1025
Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter.
MEDIUM 5.0EPSS 6.21%
Does this matter?
Lower severity and a low EPSS score (6.21%). Track it; it rarely justifies an emergency change on its own.
Description
Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 6.21% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- dream-multimedia-tv/enigma2 webinterface
- Source
- cve@mitre.org
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.