Description
HYDRA X, MIP 2 and FEDRA 2 of MPDV Mikrolab GmbH suffer from an unauthenticated local file disclosure vulnerability in all releases until Maintenance Pack 36 with Servicepack 8 (week 36/2025), which allows an attacker to read arbitrary files from the Windows operating system. The "Filename" parameter of the public $SCHEMAS$ ressource is vulnerable and can be exploited easily.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
MPDV Mikrolab GmbH MIP 2
Default version status: unaffected
<Maintenance Pack 36 with Servicepack 8, release week 36/2025affected
MPDV Mikrolab GmbH FEDRA 2
Default version status: unaffected
<Maintenance Pack 36 with Servicepack 8, release week 36/2025affected
MPDV Mikrolab GmbH HYDRA X
Default version status: unaffected
<Maintenance Pack 36 with Servicepack 8, release week 36/2025affected