Description
Multiple Western Telematic (WTI) products contain a web interface that is vulnerable to a local file inclusion attack (LFI), where any authenticated user has privileged access to files on the device's filesystem.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Western Telematic Inc Network Power Switch (NPS Series)
Default version status: unaffected
0 to ≤ 6.62affected
Western Telematic Inc Console Server (DSM Series)
Default version status: unaffected
0 to ≤ 6.62affected
Western Telematic Inc Console Server + PDU Combo Unit (CPM Series)
Default version status: unaffected
0 to ≤ 6.62affected