Description
The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
MBS Single-A
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Double-A Profibus
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Double-A x-link
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Single-X
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Double-X CAN
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Double-X DALI
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Double-X KNX
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Double-X LON
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Double-X M-Bus
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Double-X PROFINET
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Double-X x-link
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Triple-X KNX+DALI
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Triple-X KNX+LON
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Triple-X KNX+M-Bus
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Triple-X PROFINET+DALI
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Triple-X PROFINET+KNX
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Triple-X PROFINET+LON
Default version status: unaffected
V1_00_00 to < V6_00_07affected
MBS Triple-X PROFINET+M-Bus
Default version status: unaffected
V1_00_00 to < V6_00_07affected