ID de Prueba:	1.3.6.1.4.1.25623.1.0.103894
Categoría:	Web application abuses
Título:	Emerson Network Power Avocent MergePoint Unity 2016 KVM Directory Traversal Vulnerability
Resumen:	Emerson Network Power Avocent MergePoint Unity 2016 KVM is prone to a; directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Descripción:	Summary: Emerson Network Power Avocent MergePoint Unity 2016 KVM is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Vulnerability Insight: Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 (aka MPU2016) KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file. Vulnerability Impact: A remote attacker can exploit this issue to obtain sensitive information that could aid in further attacks. Affected Software/OS: Emerson Network Power Avocent MergePoint Unity 2016 KVM firmware 1.9.16473 is vulnerable. Other versions may also be affected. Solution: Updates are available. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6030 BugTraq ID: 65105 http://www.securityfocus.com/bid/65105 CERT/CC vulnerability note: VU#168751 http://www.kb.cert.org/vuls/id/168751
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.