NetSight
IP …
medium5.3

CVE-2023-6032

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause a file system enumeration and fi…

Impact

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS.

Affected products

VendorProductAffected versions
Schneider-ElectricGalaxy Vl Firmware
Version 12.21
Schneider-ElectricGalaxy Vs Firmware
Version 6.82

Weakness classification

CWE-22

References