CVE-2020-27553

Katalog CVE

CVSS 7.5 · High EPSS 1,5%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada basetech ge-131 bt-1837836 firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

In BASETech GE-131 BT-1837836 firmware 20180921, the web-server on the system is configured with the option “DocumentRoot /etc“. This allows an attacker with network access to the web-server to download any files from the “/etc” folder without authentication. No path traversal sequences are needed to exploit this vulnerability.

Rincian

Terbit di NVD

17 November 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns exploit · advisory pihak ketiga