nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-25289 CVE-2023-25289
HIGH
Virtual Reception v1.0 - Web Server Directory Traversal
Record summary
CVE-2023-25289 has a selected CVSS score of 7.5 (high); EIP currently links 1 catalogued exploit.
Description
Directory Traversal vulnerability in virtualreception Digital Receptie version win7sp1_rtm.101119-1850 6.1.7601.1.0.65792 in embedded web server, allows attacker to gain sensitive information via a crafted GET request.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 29, 2025 · Source: CVE List
Proofs of concept
1Catalogued exploits
ExploitDBVirtual Reception v1.0 - Web Server Directory TraversalExploitDB exploitby SpinaeNot analyzed1 file
References
2exploit-db.com
https://www.exploit-db.com/exploits/51142