CVE-2018-16059

Description

Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• http://www.securityfocus.com/bid/107416 ↗
• https://www.exploit-db.com/exploits/45342/ ↗
• https://ics-cert.us-cert.gov/advisories/ICSA-19-073-03 ↗
• https://cert.vde.com/en-us/advisories/vde-2019-002 ↗