CVE-2019-18253

CRITICAL

Relion 670 Series < 1p1r26 - Path Traversal via Specially Crafted Paths

Title source: llm
STIX 2.1

Description

An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series (versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior) outside the intended directory.

References (1)

Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://www.us-cert.gov/ics/advisories/icsa-19-330-01

Scores

CVSS v3 10.0
EPSS 0.0198
EPSS Percentile 78.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-22
Status published
Products (1)
hitachienergy/relion_670_firmware < 1p1r26
Published Nov 27, 2019
Tracked Since Feb 18, 2026