CVE-2023-4990

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Oct 11, 2023
Updated: Oct 16, 2023
CWE ID 121

Summary

CVE-2023-4990 is a directory traversal vulnerability affecting MCL-Net versions prior to the 4.6 Update Package (P01). This issue could potentially enable attackers to access and read arbitrary files on the affected system, posing a significant risk to data confidentiality. Attackers could exploit this vulnerability through specially crafted HTTP requests to the targeted MCL-Net application. To mitigate the risk, it is crucial that users upgrade their MCL-Net software to the latest version as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share