fenics.fujitsu.com
https://fenics.fujitsu.com/networkservice/m2m/download/update-m.html CVE-2024-40617
MEDIUM
Record summary
CVE-2024-40617 has a selected CVSS score of 6.5 (medium); EIP currently links 1 repository PoC.
Description
Path traversal vulnerability exists in FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS). If a remote authenticated attacker with User Class privilege sends a specially crafted request to the affected product, access restricted files containing sensitive information may be accessed. As a result, Administrator Class privileges of the product may be hijacked.
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 1
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 23, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS)Browse Fujitsu Limited / FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS) | CVE List | prior to V02L19C01 | affected |
Proofs of concept
1Repository PoCs
GitHubKyssK00L/CVE-2024-40617Repository PoCby KyssK00LStars: 7Not analyzed2 files
References
3jvn.jp
https://jvn.jp/en/jp/JVN25583987 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-40617