CVE-2018-8727

EPSS 7.8%

Vexday Risk Score

18Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 7.8%KEV nãoPoC —Nuclei simMetasploit —Patch —

Lifecycle

19 Jun 2018Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system to access files or directories via the Web Client webserver.

Affected products

n/a · n/a

References

https://www.onvio.nl/nieuws/cve-mirasys-vulnerability