CVE-2024-6049

HIGHNuclei

Unauthenticated Path Traversal

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-6049 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

The web server of Lawo AG vsm LTC Time Sync (vTimeSync) is affected by a "..." (triple dot) path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only possible if the requested file has some file extension, e. g. .exe or .txt.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 24, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

vsm LTC Time Sync (vTimeSync)

Browse Lawo AG / vsm LTC Time Sync (vTimeSync)

Default status: affected

CVE List4.5.6.0unaffected

vsm_ltc_timesync

Browse lawo / vsm_ltc_timesync

Default status: affected

CVE ListBefore 4.5.6.0unaffected

Nuclei templates

1
ProjectDiscoveryHIGHLawo AG vsm LTC Time Sync (vTimeSync) - Path TraversalCVSS 7.5

The web server of Lawo AG vsm LTC Time Sync (vTimeSync) is affected by a "..." (triple dot) path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only possible if the requested file has some file extension, e. g. .exe or .txt.

Impact

Unauthenticated attackers can exploit triple dot path traversal to download arbitrary files from the operating system, potentially exposing configuration files and credentials.

Remediation

Update Lawo AG vsm LTC Time Sync (vTimeSync) to the latest version that addresses the path traversal vulnerability.

WeaknessesCWE-32
Authorss4e-io
Template tagscvecve2024lawovtimesynclfivuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
https://lawo.com/lawo-downloads/ https://r.sec-consult.com/lawo https://packetstormsecurity.com/files/182347/Lawo-AG-vsm-LTC-Time-Sync-Path-Traversal.html https://sec-consult.com/vulnerability-lab/advisory/unauthenticated-path-traversal-vulnerability-in-lawo-ag-vsm-ltc-time-sync-vtimesync/ https://nvd.nist.gov/vuln/detail/cve-2024-6049

Source: ProjectDiscovery

References

4