Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Priority MEDIUM 50

A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0073 Published 2023-10-04 No fix listed CWE-269
Priority MEDIUM 42

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow a remote code execution when a file is saved.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01855 Published 2022-02-11 No fix listed CWE-22
Priority LOW 39

A CWE-306: Missing Authentication for Critical Function vulnerability exists in C-Bus Toolkit v1.15.8 and prior that could allow an attacker to use a crafted webpage to obtain remote access to the system.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.12083 Published 2021-07-21 No fix listed CWE-306
Priority MEDIUM 56

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when restoring a project.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.31475 Published 2021-04-13 No fix listed CWE-22
Priority HIGH 66

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when a file is uploaded.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.41705 Published 2021-04-13 No fix listed CWE-22
Priority MEDIUM 57

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when restoring project files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.28031 Published 2021-04-13 No fix listed CWE-22
Priority HIGH 66

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when processing config files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.40013 Published 2021-04-13 No fix listed CWE-22
Priority LOW 35

A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivileged user modifies a file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00792 Published 2021-04-13 Fixed in 1.15.9 CWE-732