vsm_ltc_timesync vulnerabilities

1 known vulnerability in vsm_ltc_timesync from Lawo. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  vsm LTC Time Sync (vTimeSync): Path Traversal: '...' (Triple Dot)

  CVE-2024-6049Oct 24, 2024LawoEPSS 4.23%

  The web server of Lawo AG vsm LTC Time Sync (vTimeSync) is affected by a "..." (triple dot) path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system.