Skip to main content

Neutron CVE-2023-6118

HIGH
Path Traversal: '/../filedir' (CWE-25)
2023-11-23 iletisim@usom.gov.tr
Path Traversal Neutron Neu Ipb210 28 Firmware Ntl Pt 06Wod 3Mp Firmware Neu Ipb410 28 Firmware Ntl Bc 01W Firmware Neu Ipbm211 Firmware Ntl Pt 09 Wos 3Mp Firmware Neu Ipbm411 Firmware Ntl Pt 10 4Gwos 3Mp Firmware Ipc2224 Sr3 Npf 36 Firmware Ipc2624 Sr3 Npf 36 Firmware Ntl Bc 03 Snm Firmware Ntl Bc 03 Snp Firmware Neu Ipd220 28 Firmware Ntl Bc01 M Firmware Neu Ipdm221 Firmware Neu Ipdm421 Firmware Ntl Ip05 3Mp Firmware
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Nov 23, 2023 - 15:15 cve.org
HIGH 7.5

DescriptionCVE.org

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal.

This issue affects IP Camera: before b1130.1.0.1.

AnalysisAI

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal.1.0.1. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-25. Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal.1.0.1. Affected products include: Neutron Neu-Ipb210-28 Firmware, Neutron Ntl-Pt-06Wod-3Mp Firmware, Neutron Neu-Ipb410-28 Firmware, Neutron Ntl-Bc-01W Firmware, Neutron Neu-Ipbm211 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Neutron

View all
CVE-2015-8914 CRITICAL POC
9.1 Jun 17

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an int
CVE-2021-38598 CRITICAL POC
9.1 Aug 23

OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbrid
CVE-2015-3221 MEDIUM POC
4.0 Aug 26

OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, a
CVE-2021-40797 MEDIUM POC
6.5 Sep 08

An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before
CVE-2021-40085 MEDIUM POC
6.5 Aug 31

An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Rated medium sev
CVE-2019-9735 MEDIUM POC
6.5 Mar 13

An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x bef
CVE-2023-4178 CRITICAL
9.8 Sep 05

Authentication Bypass by Spoofing vulnerability in Neutron Neutron Smart VMS allows Authentication Bypass.1.0.1. Rated c
CVE-2016-5362 HIGH
8.2 Jun 17

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an int
CVE-2016-5363 HIGH
8.2 Jun 17

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an int
CVE-2014-0187 CRITICAL
9.0 Apr 28

The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authe
CVE-2013-6433 HIGH
7.6 Jun 02

The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configurati
CVE-2014-3632 HIGH
7.6 Oct 07

The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red H

Same weakness CWE-25 – Path Traversal: '/../filedir'

View all
CVE-2022-20775 HIGH POC
7.8
CVE-2022-20818 HIGH
7.8
CVE-2023-6919 HIGH
7.5
CVE-2024-2442 HIGH
7.5
CVE-2026-68959 MEDIUM
5.8
CVE-2026-23877 MEDIUM
4.3

Same technique Path Traversal

View all
CVE-2019-19781 CRITICAL POC
9.8
CVE-2021-21972 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2022-41352 CRITICAL POC
9.8
CVE-2021-27065 HIGH POC
7.8
CVE-2018-20250 HIGH POC
7.8
CVE-2022-37042 CRITICAL POC
9.8
CVE-2025-64446 CRITICAL POC
9.8

Share

CVE-2023-6118 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy