Weakness
The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
Affected products
- mbs-solutions universal_gateway_firmware
- mbs-solutions double-a_profibus
- mbs-solutions double-a_x-link
- mbs-solutions double-x_can
- mbs-solutions double-x_dali
- mbs-solutions double-x_knx
- mbs-solutions double-x_lon
- mbs-solutions double-x_m-bus
References
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.