CVE-2017-12694 – SpiderControl SCADA Webserver iniNet Directory Traversal Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2017-12694

23 Aug 2017 — A Directory Traversal issue was discovered in SpiderControl SCADA Web Server. An attacker may be able to use a simple GET request to perform a directory traversal into system files. Se ha descubierto un problema de salto de directorio en SpiderControl SCADA Web Server. Un atacante podría ser capaz de emplear una petición GET para realizar un salto de directorio en archivos de sistema. This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of SpiderControl SC... • http://www.securityfocus.com/bid/100456 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •