Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows…
Priority LOW 30Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · None · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitrary files via modified .. (dot dot) sequences in the URL, including (1) "..%2f" (encoded "/" slash), "..../" (multiple dot), and "..%255c../" (double-encoded "\" backslash).
Why it matters now
EPSS 0.04382 91st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 35
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ipcheck:server_monitor:4.3.1.368:*:*:*:*:*:*:* | 4.3.1.368 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:4.3.1.382:*:*:*:*:*:*:* | 4.3.1.382 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:4.4.1.521:*:*:*:*:*:*:* | 4.4.1.521 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:4.4.1.522:*:*:*:*:*:*:* | 4.4.1.522 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.0.1.272:*:*:*:*:*:*:* | 5.0.1.272 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.0.1.299:*:*:*:*:*:*:* | 5.0.1.299 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.0.1.309:*:*:*:*:*:*:* | 5.0.1.309 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.0.1.321:*:*:*:*:*:*:* | 5.0.1.321 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.1.0.341:*:*:*:*:*:*:* | 5.1.0.341 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.1.0.342:*:*:*:*:*:*:* | 5.1.0.342 | Vulnerable | Ipcheck |
- cpe:2.3:a:ipcheck:server_monitor:4.3.1.368:*:*:*:*:*:*:* Versions 4.3.1.368 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:4.3.1.382:*:*:*:*:*:*:* Versions 4.3.1.382 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:4.4.1.521:*:*:*:*:*:*:* Versions 4.4.1.521 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:4.4.1.522:*:*:*:*:*:*:* Versions 4.4.1.522 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.0.1.272:*:*:*:*:*:*:* Versions 5.0.1.272 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.0.1.299:*:*:*:*:*:*:* Versions 5.0.1.299 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.0.1.309:*:*:*:*:*:*:* Versions 5.0.1.309 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.0.1.321:*:*:*:*:*:*:* Versions 5.0.1.321 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.1.0.341:*:*:*:*:*:*:* Versions 5.1.0.341 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.1.0.342:*:*:*:*:*:*:* Versions 5.1.0.342 Vulnerable ·Ipcheck
Show 25 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ipcheck:server_monitor:5.1.0.345:*:*:*:*:*:*:* | 5.1.0.345 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.2.0.404:*:*:*:*:*:*:* | 5.2.0.404 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.2.0.405:*:*:*:*:*:*:* | 5.2.0.405 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.2.0.418:*:*:*:*:*:*:* | 5.2.0.418 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.2.0.420:*:*:*:*:*:*:* | 5.2.0.420 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.2.2.449:*:*:*:*:*:*:* | 5.2.2.449 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.2.2.451:*:*:*:*:*:*:* | 5.2.2.451 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.0.506:*:*:*:*:*:*:* | 5.3.0.506 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.0.507:*:*:*:*:*:*:* | 5.3.0.507 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.0.508:*:*:*:*:*:*:* | 5.3.0.508 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.0.509:*:*:*:*:*:*:* | 5.3.0.509 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.1.574:*:*:*:*:*:*:* | 5.3.1.574 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.1.575:*:*:*:*:*:*:* | 5.3.1.575 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.1.578:*:*:*:*:*:*:* | 5.3.1.578 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.1.579:*:*:*:*:*:*:* | 5.3.1.579 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.1.580:*:*:*:*:*:*:* | 5.3.1.580 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.1.581:*:*:*:*:*:*:* | 5.3.1.581 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.1.586:*:*:*:*:*:*:* | 5.3.1.586 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.1.587:*:*:*:*:*:*:* | 5.3.1.587 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.2.605:*:*:*:*:*:*:* | 5.3.2.605 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.2.606:*:*:*:*:*:*:* | 5.3.2.606 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.2.609:*:*:*:*:*:*:* | 5.3.2.609 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.2.610:*:*:*:*:*:*:* | 5.3.2.610 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.2.616:*:*:*:*:*:*:* | 5.3.2.616 | Vulnerable | Ipcheck |
| cpe:2.3:a:ipcheck:server_monitor:5.3.2.617:*:*:*:*:*:*:* | 5.3.2.617 | Vulnerable | Ipcheck |
- cpe:2.3:a:ipcheck:server_monitor:5.1.0.345:*:*:*:*:*:*:* Versions 5.1.0.345 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.2.0.404:*:*:*:*:*:*:* Versions 5.2.0.404 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.2.0.405:*:*:*:*:*:*:* Versions 5.2.0.405 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.2.0.418:*:*:*:*:*:*:* Versions 5.2.0.418 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.2.0.420:*:*:*:*:*:*:* Versions 5.2.0.420 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.2.2.449:*:*:*:*:*:*:* Versions 5.2.2.449 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.2.2.451:*:*:*:*:*:*:* Versions 5.2.2.451 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.0.506:*:*:*:*:*:*:* Versions 5.3.0.506 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.0.507:*:*:*:*:*:*:* Versions 5.3.0.507 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.0.508:*:*:*:*:*:*:* Versions 5.3.0.508 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.0.509:*:*:*:*:*:*:* Versions 5.3.0.509 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.1.574:*:*:*:*:*:*:* Versions 5.3.1.574 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.1.575:*:*:*:*:*:*:* Versions 5.3.1.575 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.1.578:*:*:*:*:*:*:* Versions 5.3.1.578 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.1.579:*:*:*:*:*:*:* Versions 5.3.1.579 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.1.580:*:*:*:*:*:*:* Versions 5.3.1.580 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.1.581:*:*:*:*:*:*:* Versions 5.3.1.581 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.1.586:*:*:*:*:*:*:* Versions 5.3.1.586 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.1.587:*:*:*:*:*:*:* Versions 5.3.1.587 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.2.605:*:*:*:*:*:*:* Versions 5.3.2.605 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.2.606:*:*:*:*:*:*:* Versions 5.3.2.606 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.2.609:*:*:*:*:*:*:* Versions 5.3.2.609 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.2.610:*:*:*:*:*:*:* Versions 5.3.2.610 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.2.616:*:*:*:*:*:*:* Versions 5.3.2.616 Vulnerable ·Ipcheck
- cpe:2.3:a:ipcheck:server_monitor:5.3.2.617:*:*:*:*:*:*:* Versions 5.3.2.617 Vulnerable ·Ipcheck
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2006-4140
- 2026-10-03 Alias added: GHSA-mw52-hqx9-7696
References
Sources
- CVE-2006-4140 · CVE Program
- CVE-2006-4140 · NVD
- FIRST EPSS
- GHSA-mw52-hqx9-7696 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences