What’s Vulnerable › Vulnerabilities

CVE-2024-27575

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-04 · updated 2026-06-17
• Weakness: CWE-22

Description

INOTEC Sicherheitstechnik WebServer CPS220/64 3.3.19 allows a remote attacker to read arbitrary files via absolute path traversal, such as with the /cgi-bin/display?file=/etc/passwd URI.

Affected products

• Inotec Gmbh Webserver: 3.3.19

References

• https://gist.github.com/s4fv4n/098bd368bf054d008078e369108c2ebd
• https://www.inotec-licht.de/
• https://gist.github.com/s4fv4n/098bd368bf054d008078e369108c2ebd
• https://www.inotec-licht.de/

Get alerted when CVE-2024-27575 or the next vulnerability affects your stack