CVE-2020-36883

Summary

SpinetiX Fusion Digital Signage 3.4.8 and lower contains an authenticated path traversal vulnerability that allows attackers to manipulate file backup and deletion operations through unverified input parameters. Attackers can exploit path traversal techniques in index.php to write backup files to arbitrary locations and delete files by manipulating backup and file delete requests.

Affected Software

Weaknesses

• CWE-22: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

Additional References

• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5594.php

References

• https://www.exploit-db.com/exploits/48844
• https://www.spinetix.com
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5594.php
• https://github.com/Mbed-TLS/mbedtls
• https://www.vulncheck.com/advisories/spinetix-fusion-digital-signage-authenticated-path-traversal-via-file-operations

• ←Previous
• Next→