CWE Code: 22
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Summary: an issue was discovered on topcon positioning net-g5 gnss receiver devices with firmware 5.2.2. the web interface of the product has a local file inclusion vulnerability. an attacker with administrative privileges can craft a special url to read arbitrary files from the device's files system.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2019-09-20
Last Modified Date: 2019-09-23