CVE-2011-4518 Directory traversal vulnerability in the PmWebDir object in the web server in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to read arbitrary files via unspecified vectors.
MediumCVSS 5.0
EPSS 26.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Directory traversal vulnerability in the PmWebDir object in the web server in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to read arbitrary files via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsys promotic | <= 8.1.4 | No fix listed |
| microsys promotic | = 8.0.0 | No fix listed |
| microsys promotic | = 8.0.1 | No fix listed |
| microsys promotic | = 8.0.2 | No fix listed |
| microsys promotic | = 8.0.3 | No fix listed |
| microsys promotic | = 8.0.4 | No fix listed |
| microsys promotic | = 8.0.5 | No fix listed |
| microsys promotic | = 8.0.6 | No fix listed |
| microsys promotic | = 8.0.7 | No fix listed |
| microsys promotic | = 8.0.8 | No fix listed |
| microsys promotic | = 8.0.9 | No fix listed |
| microsys promotic | = 8.0.10 | No fix listed |
| microsys promotic | = 8.0.11 | No fix listed |
| microsys promotic | = 8.0.12 | No fix listed |
| microsys promotic | = 8.0.13 | No fix listed |
| microsys promotic | = 8.1.0 | No fix listed |
| microsys promotic | = 8.1.1 | No fix listed |
| microsys promotic | = 8.1.2 | No fix listed |
| microsys promotic | = 8.1.3 | No fix listed |
References
- ics-cert.us-cert.gov us-government-resource
- www.promotic.eu