high7.5Public exploit code
CVE-2021-45043
HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_Language parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HD-Network Real-time Monitoring System 2.0 - Local File Inclusion (LFI)2021-12-13 · remote · linux
Impact
HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_Language parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hd-Network Real-Time Monitoring System Project | Hd-Network Real-Time Monitoring System | Version 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://drive.google.com/file/d/1DlfZz0F8skWy3Mkahx_NMo-sYZh9-eun/view?usp=sharing
- https://drive.google.com/file/d/1bx9yCN-IHYuRpd7g3jhMb0LcTC1ARzSX/view?usp=sharing
- https://drive.google.com/file/d/1DlfZz0F8skWy3Mkahx_NMo-sYZh9-eun/view?usp=sharing
- https://drive.google.com/file/d/1bx9yCN-IHYuRpd7g3jhMb0LcTC1ARzSX/view?usp=sharing