Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2018-11720 Details

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow Directory Traversal.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://xovis.com/security/xovis-sec-2018-003.html	CVE	Vendor Advisory
https://xovis.com/security/xovis-sec-2018-003.html	[email protected]	Vendor Advisory

CWE-ID	CWE Name	Source
CWE-22	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')	[email protected]

Product	Versions
xovis pc2r firmware	<= 3.6.0
CPE cpe:2.3:o:xovis:pc2r_firmware:::::::: Remediation No remediation found in references.
xovis pc2r	All versions
CPE cpe:2.3:h:xovis:pc2r:-:::::::* Remediation No remediation found in references.
xovis pc3 firmware	<= 3.6.0
CPE cpe:2.3:o:xovis:pc3_firmware:::::::: Remediation No remediation found in references.
xovis pc3	All versions
CPE cpe:2.3:h:xovis:pc3:-:::::::* Remediation No remediation found in references.
xovis pc2 firmware	<= 3.6.0
CPE cpe:2.3:o:xovis:pc2_firmware:::::::: Remediation No remediation found in references.
xovis pc2	All versions
CPE cpe:2.3:h:xovis:pc2:-:::::::* Remediation No remediation found in references.

4 change records found show changes

QUICK INFO