high7.5Public exploit code
CVE-2021-35380
A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TermTalk Server 3.24.0.2 - Arbitrary File Read (Unauthenticated)2022-01-05 · remote · windows
Impact
A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download (http://url:port/file?valore).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solari | Termtalk Server | Version 3.24.0.2 |