Zenon
CVE-2019-15638
HIGH
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
COPA-DATA zenone32 zenon Editor through 8.10 has an Uncontrolled Search Path Element.
AnalysisAI
COPA-DATA zenone32 zenon Editor through 8.10 has an Uncontrolled Search Path Element. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-427. COPA-DATA zenone32 zenon Editor through 8.10 has an Uncontrolled Search Path Element. Affected products include: Copadata Zenon. Version information: through 8.10.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Z
Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit th
Relative Path Traversal vulnerability in ABB Zenon 8.20 allows the user to access files on the Zenon system and user als
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Z
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Z
Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit th
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Z
Same weakness CWE-427 – Uncontrolled Search Path Element
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today