CVE-2018-16739 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	8.8 HIGH	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitre	CNA	---				---
CVE	ADP	---				---
CISA-ADP	ADP	8.8 HIGH	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 46%

Vendor	Product	Version
abus	tvip_10000_firmware	-
abus	tvip_10001_firmware	-
abus	tvip_10005_firmware	-
abus	tvip_10005a_firmware	-
abus	tvip_10005b_firmware	-
abus	tvip_10050_firmware	-
abus	tvip_10051_firmware	-
abus	tvip_10055a_firmware	-
abus	tvip_10055b_firmware	-
abus	tvip_10500_firmware	-
abus	tvip_10550_firmware	-
abus	tvip_11000_firmware	-
abus	tvip_11050_firmware	-
abus	tvip_11500_firmware	-
abus	tvip_11501_firmware	-
abus	tvip_11502_firmware	-
abus	tvip_11550_firmware	-
abus	tvip_11551_firmware	-
abus	tvip_11552_firmware	-
abus	tvip_20000_firmware	-
abus	tvip_20050_firmware	-
abus	tvip_20500_firmware	-
abus	tvip_20550_firmware	-
abus	tvip_21000_firmware	-
abus	tvip_21050_firmware	-
abus	tvip_21500_firmware	-
abus	tvip_21501_firmware	-
abus	tvip_21502_firmware	-
abus	tvip_21550_firmware	-
abus	tvip_21551_firmware	-
abus	tvip_21552_firmware	-
abus	tvip_22500_firmware	-
abus	tvip_31000_firmware	-
abus	tvip_31001_firmware	-
abus	tvip_31050_firmware	-
abus	tvip_31500_firmware	-
abus	tvip_31501_firmware	-
abus	tvip_31550_firmware	-
abus	tvip_31551_firmware	-
abus	tvip_32500_firmware	-
abus	tvip_51500_firmware	-
abus	tvip_51550_firmware	-
abus	tvip_71500_firmware	-
abus	tvip_71501_firmware	-
abus	tvip_71550_firmware	-
abus	tvip_71551_firmware	-
abus	tvip_72500_firmware	-

𝑥

= Vulnerable software versions

Known Exploits!

Common Weakness Enumeration

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References

https://sec.maride.cc/posts/abus/

https://www.ccc.de/en/updates/2019/update-nicht-verfugbar-hersteller-nicht-zu-erreichen

https://sec.maride.cc/posts/abus/

https://www.ccc.de/en/updates/2019/update-nicht-verfugbar-hersteller-nicht-zu-erreichen