TI-2024-27032 Aliases CVE-2024-40617 GHSA-vhqm-6frc-f35m

Path traversal in FUJITSU Network Edgiot GW1500

LOW 32CWE-22Published 2024-07-17 · Updated 2024-10-29

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.

Summary

Path traversal vulnerability exists in FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS). If a remote authenticated attacker with User Class privilege sends a specially crafted request to the affected product, access restricted files containing sensitive information may be accessed. As a result, Administrator Class privileges of the product may be hijacked.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.01422 73rd percentileScored 2026-11-07

Fix Fixed FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS) (Fujitsu Limited): V02L19C01

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Fujitsu	FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS)	before V02L19C01	V02L19C01	Patch available	CNA

FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS) VendorFujitsu Affected before V02L19C01 Fixed in V02L19C01 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:fujitsu:network_edgiot_gw1500_firmware::::::::	before v02l19c01	Vulnerable	Fujitsu
cpe:2.3:h:fujitsu:network_edgiot_gw1500:-:::::::*	not specified by NVD	Running on	Fujitsu

cpe:2.3:o:fujitsu:network_edgiot_gw1500_firmware:*:*:*:*:*:*:*:* Versions before v02l19c01 Vulnerable ·Fujitsu
cpe:2.3:h:fujitsu:network_edgiot_gw1500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Fujitsu

Remediation

Fix · CNA FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS) (Fujitsu Limited) Fixed in V02L19C01

Timeline

2026-10-02 Threatist record created from CVE-2024-40617
2026-10-03 Alias added: GHSA-vhqm-6frc-f35m

References

Advisory 1

https://jvn.jp/en/jp/JVN25583987/

Other 1

https://fenics.fujitsu.com/networkservice/m2m/download/update-m.html

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences