CVE-2021-35380

HIGHNuclei

TermTalk Server 3.24.0.2 - Arbitrary File Read (Unauthenticated)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-35380 has a selected CVSS score of 7.5 (high); EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download (http://url:port/file?valore).

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Nuclei templates
1

Proofs of concept

1

Catalogued exploits

ExploitDBTermTalk Server 3.24.0.2 - Arbitrary File Read (Unauthenticated)ExploitDB exploitby Fabiano GolluscioNot analyzed1 file
ExploitDB
PoC details

Nuclei templates

1
ProjectDiscoveryHIGHTermTalk Server 3.24.0.2 - Local File InclusionCVSS 7.5

TermTalk Server (TTServer) 3.24.0.2 is vulnerable to file inclusion which allows unauthenticated malicious user to gain access to the files on the remote system by providing the relative path of the file they want to retrieve.

Impact

Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information, including configuration files, credentials, and other sensitive data.

Remediation

Apply the latest patch or upgrade to a non-vulnerable version of TermTalk Server.

WeaknessesCWE-22
Authorsfxploit
Template tagscve2021cvetermtalklfiunauthlfredbsolarivuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:solari:termtalk_server:3.24.0.2:*:*:*:*:*:*:*
https://www.swascan.com/solari-di-udine/ https://www.exploit-db.com/exploits/50638 https://nvd.nist.gov/vuln/detail/CVE-2021-35380 https://www.swascan.com/it/security-blog/ https://github.com/anonymous364872/Rapier_Tool

Source: ProjectDiscovery

References

4