CVE-2021-45783
MEDIUMBookeen Notea Firmware BK_R_1.0.5_20210608 - Path Traversal
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-45783. PoCs published by Clement MAILLIOUX.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Bookeen Notea's note export function. By renaming a note with a traversal payload (e.g., ../../../../../../), an attacker can access the device's filesystem when exporting the note.
Description
Bookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability that allows an attacker to obtain sensitive information.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in Bookeen Notea's note export function. By renaming a note with a traversal payload (e.g., ../../../../../../), an attacker can access the device's filesystem when exporting the note.
References (3)
Scores
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N