CVE-2023-4990
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Oct 11, 2023
Updated: Oct 16, 2023
CWE ID 121
Summary
CVE-2023-4990 is a directory traversal vulnerability affecting MCL-Net versions prior to the 4.6 Update Package (P01). This issue could potentially enable attackers to access and read arbitrary files on the affected system, posing a significant risk to data confidentiality. Attackers could exploit this vulnerability through specially crafted HTTP requests to the targeted MCL-Net application. To mitigate the risk, it is crucial that users upgrade their MCL-Net software to the latest version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share