CVE-2023-37218
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
CVE-2023-37218 affects the Tadiran Telecom Aeonix system and involves improper limitation of a pathname to a restricted directory, potentially leading to a 'Path Traversal' attack. An attacker could gain access to files outside the allowed directory.
Risk Assessment
The risk to the organization involves the potential for unauthorized access to sensitive data, which could lead to loss of confidentiality and possible security breaches.
Recommendation
It is recommended to update the Tadiran Telecom Aeonix system to the latest version that addresses this vulnerability and to implement additional security measures against 'Path Traversal' attacks.
Other vulnerabilities in Tadiran Telecom Aeonix
Original NVD description (English source)
Tadiran Telecom Aeonix - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

