CVE Catalog

CVE-2023-37218

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.58%

43th percentile - higher than 43% of all known CVEs

Summary

CVE-2023-37218 affects the Tadiran Telecom Aeonix system and involves improper limitation of a pathname to a restricted directory, potentially leading to a 'Path Traversal' attack. An attacker could gain access to files outside the allowed directory.

Risk Assessment

The risk to the organization involves the potential for unauthorized access to sensitive data, which could lead to loss of confidentiality and possible security breaches.

Recommendation

It is recommended to update the Tadiran Telecom Aeonix system to the latest version that addresses this vulnerability and to implement additional security measures against 'Path Traversal' attacks.

Other vulnerabilities in Tadiran Telecom Aeonix

Original NVD description (English source)

Tadiran Telecom Aeonix - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Vulnerability data from NVD (NIST) · CISA KEV · EPSS