CVEvulnerability
CVE-2023-0113
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-01-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
A vulnerability was found in Netis Netcore Router up to 2.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-217591.
Affected configurations
• netis-systems netcore router firmware
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://vuldb.com/?ctiid.217591 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.217591 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?ctiid.217591 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.217591 Permissions Required, Third Party Advisory, VDB Entry