Skip to content

CVE-2015-2860 Directory traversal vulnerability in Avigilon Control Center (ACC) 4 before 4.12.0.54 and 5 before 5.4.2.22 allows remote attackers to read arbitrary files via a crafted help/ URL.

HighCVSS 7.8 EPSS 2.7%
Published
Updated
Exploit status
No public exploit known

Description

Directory traversal vulnerability in Avigilon Control Center (ACC) 4 before 4.12.0.54 and 5 before 5.4.2.22 allows remote attackers to read arbitrary files via a crafted help/ URL.

Affected products

ProductAffected versionsFixed in
avigilon control center <= 5.4.2.21 No fix listed
avigilon control center <= 4.12.0.53 No fix listed

References

  • VU#555984 third-party-advisory us-government-resource
  • 75115 vdb-entry