Vulnerability Description
A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download (http://url:port/file?valore).
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Solari | Termtalk Server | 3.24.0.2 |
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/50638ExploitThird Party AdvisoryVDB Entry
- https://www.swascan.com/it/security-blog/Third Party Advisory
- https://www.swascan.com/solari-di-udine/Third Party Advisory
- https://www.exploit-db.com/exploits/50638ExploitThird Party AdvisoryVDB Entry
- https://www.swascan.com/it/security-blog/Third Party Advisory
- https://www.swascan.com/solari-di-udine/Third Party Advisory
FAQ
What is CVE-2021-35380?
CVE-2021-35380 is a vulnerability with a CVSS score of 7.5 (HIGH). A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining...
How severe is CVE-2021-35380?
CVE-2021-35380 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-35380?
Check the references section above for vendor advisories and patch information. Affected products include: Solari Termtalk Server.