CVE-2012-5972

SpecView Directory Traversal

CVSS 2.6 EPSS 4.8%CWE-23

Vexday Risk Score

28Low

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 2.6EPSS 4.8%KEV nãoPoC públicaPatch —

Lifecycle

29 Jun 2012Public PoC

17 Jan 2013Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Directory traversal vulnerability in the web server in SpecView 2.5 build 853 and earlier allows remote attackers to read arbitrary files via a ... (dot dot dot) in a URI.

AV:N/AC:H/Au:N/C:P/I:N/A:N

Affected products

SpecView · SpecView

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/19455unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://aluigi.altervista.org/adv/specview_1-adv.txt https://www.cisa.gov/news-events/ics-advisories/icsa-13-011-02 http://www.us-cert.gov/control_systems/pdf/ICSA-13-011-02.pdf