Description
Directory traversal vulnerability in the web server in Fultek WinTr Scada 4.0.5 and earlier allows remote attackers to read arbitrary files via a crafted request.
References (2)
Core 2
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/50668
US Government Resource x_refsource_misc
http://www.us-cert.gov/control_systems/pdf/ICSA-12-262-01.pdf
Scores
EPSS
0.0263
EPSS Percentile
83.6%
Details
CWE
CWE-22
Status
published
Products (3)
fultek/wintr_scada
2.0.0
fultek/wintr_scada
2.5
fultek/wintr_scada
< 4.0.5
Published
Sep 25, 2012
Tracked Since
Feb 18, 2026