medium5.3Public exploit code
CVE-2018-16059
Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WirelessHART Fieldgate SWG70 3.0 - Directory Traversal2018-09-06 · webapps · hardware
Impact
Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Endress | Wirelesshart Fieldgate Swg70 Firmware | Version 3.00.07 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/107416
- https://cert.vde.com/en-us/advisories/vde-2019-002
- https://ics-cert.us-cert.gov/advisories/ICSA-19-073-03
- https://www.exploit-db.com/exploits/45342/
- http://www.securityfocus.com/bid/107416
- https://cert.vde.com/en-us/advisories/vde-2019-002
- https://ics-cert.us-cert.gov/advisories/ICSA-19-073-03
- https://www.exploit-db.com/exploits/45342/