What’s Vulnerable › Vulnerabilities

CVE-2011-3487

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2011-09-16 · updated 2026-06-16
• Weakness: CWE-22

Description

Directory traversal vulnerability in CarelDataServer.exe in Carel PlantVisor 2.4.4 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.

Affected products

• Carel Plantvisor: through 2.4.4

References

• http://aluigi.altervista.org/adv/plantvisor_1-adv.txt
• http://securityreason.com/securityalert/8384
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69762
• https://www.exploit-db.com/exploits/42706/
• http://aluigi.altervista.org/adv/plantvisor_1-adv.txt
• http://securityreason.com/securityalert/8384
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69762
• https://www.exploit-db.com/exploits/42706/

Get alerted when CVE-2011-3487 or the next vulnerability affects your stack