CVE-2024-11303

Path Traversal

Severity Score

8.7

*CVSS v4

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

The pathname of the root directory to a Restricted Directory ('Path Traversal') vulnerability in Korenix JetPort 5601 allows Path Traversal.This issue affects JetPort 5601: through 1.2.

La vulnerabilidad de ruta del directorio raíz a un directorio restringido ('Path Traversal') en Korenix JetPort 5601 permite Path Traversal. Este problema afecta a JetPort 5601: hasta 1.2.

Korenix JetPort 5601 version 1.2 suffers from a path traversal vulnerability.

*Credits: P. Oberndorfer, B. Tösch, M. Narbeshuber-Spletzer, C. Hierzer, M. Pammer

CVSS Scores

CyberDanubev4 8.7

Attack Vector

Network

Attack Complexity

Low

Attack Requirements

None

Privileges Required

None

User Interaction

None

System

Vulnerable | Subsequent

Confidentiality

High

None

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

Poc

Automatable

Yes

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-11-17 CVE Reserved
2024-11-18 CVE Published
2024-11-19 EPSS Updated
2024-11-21 CVE Updated
2024-11-21 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CAPEC

CAPEC-126: Path Traversal

References (1)

URL	Tag	Source

URL	Date	SRC
https://cyberdanube.com/en/en-st-polten-uas-path-traversal-in-korenix-jetport	2024-11-21

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Korenix Search vendor "Korenix"		JetPort 5601 Search vendor "Korenix" for product "JetPort 5601"				<= 1.2 Search vendor "Korenix" for product "JetPort 5601" and version " <= 1.2"		en		Affected