Sennet Datalogger Serie 200
Monthly
Authenticated path traversal in the web portal of Satel Iberia's SenNet Datalogger Serie 200 allows a low-privileged portal user to read arbitrary files and list directories accessible to the web server's system account, exposing configuration or confidential data. The issue is scored CVSS 7.1 with a CVSS 4.0 vector of AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N, and the independent assessment rates it a moderate-severity confidentiality issue rather than a top-priority emergency. No public exploit code or confirmed active exploitation was identified at time of analysis, and the practical risk is highest where the device web interface is reachable from untrusted networks or where default, shared, or weak portal credentials are in use.
Authenticated path traversal in the web portal of Satel Iberia's SenNet Datalogger Serie 200 allows a low-privileged portal user to read arbitrary files and list directories accessible to the web server's system account, exposing configuration or confidential data. The issue is scored CVSS 7.1 with a CVSS 4.0 vector of AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N, and the independent assessment rates it a moderate-severity confidentiality issue rather than a top-priority emergency. No public exploit code or confirmed active exploitation was identified at time of analysis, and the practical risk is highest where the device web interface is reachable from untrusted networks or where default, shared, or weak portal credentials are in use.