Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2022-41607

ETIC Telecom Remote Access Server Path Traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s application programmable interface (API) is vulnerable to directory traversal through several different methods. This could allow an attacker to read sensitive files from the server, including SSH private keys, passwords, scripts, python objects, database files, and more.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ETIC Telecom Remote Access Server (RAS)

Default version status: unaffected

  • 0 to ≤ 4.5.0affected

References