What is the CVSS score of CVE-2023-6118?

CVE-2023-6118 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Neu Ipb210 28 Firmware CVE-2023-6118

HIGH

Path Traversal: '/../filedir' (CWE-25)

2023-11-23 iletisim@usom.gov.tr

Path Traversal Neu Ipb210 28 Firmware Ntl Pt 06Wod 3Mp Firmware Neu Ipb410 28 Firmware Ntl Bc 01W Firmware Neu Ipbm211 Firmware Ntl Pt 09 Wos 3Mp Firmware Neu Ipbm411 Firmware Ntl Pt 10 4Gwos 3Mp Firmware Ipc2224 Sr3 Npf 36 Firmware Ipc2624 Sr3 Npf 36 Firmware Ntl Bc 03 Snm Firmware Ntl Bc 03 Snp Firmware Neu Ipd220 28 Firmware Ntl Bc01 M Firmware Neu Ipdm221 Firmware Neu Ipdm421 Firmware Ntl Ip05 3Mp Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Nov 23, 2023 - 15:15 cve.org

HIGH 7.5

DescriptionCVE.org

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal.

This issue affects IP Camera: before b1130.1.0.1.

AnalysisAI

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal.1.0.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-25. Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal.1.0.1. Affected products include: Neutron Neu-Ipb210-28 Firmware, Neutron Ntl-Pt-06Wod-3Mp Firmware, Neutron Neu-Ipb410-28 Firmware, Neutron Ntl-Bc-01W Firmware, Neutron Neu-Ipbm211 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.