profinet_inspektor_nt vulnerabilities

2 known vulnerabilities in profinet_inspektor_nt from Indo Sol. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  profinet_inspektor_nt: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-49960Feb 26, 2024Indo Sol

  In Indo-Sol PROFINET-INspektor NT through 2.4.0, a path traversal vulnerability in the httpuploadd service of the firmware allows remote attackers to write to arbitrary files via a crafted filename parameter in requests to the /upload endpoint.

• 9.8 Critical severity

  profinet_inspektor_nt: Improper Neutralization of Special Elements used in a Command

  CVE-2023-49959Feb 26, 2024Indo SolEPSS 1.37%

  In Indo-Sol PROFINET-INspektor NT through 2.4.0, a command injection vulnerability in the gedtupdater service of the firmware allows remote attackers to execute arbitrary system commands with root privileges via a crafted filename parameter in POST requests to