A security flaw has been discovered in Oinone Pamirs up to 7.2.0
The Oinone Pamirs RestController has a path traversal vulnerability in the request.getParameter function. This allows attackers with physical access to the device to access sensitive files or data. The vendor has not responded to the disclosure.
A security flaw has been discovered in Oinone Pamirs up to 7.2.0. This vulnerability affects the function request.getParameter of the file LocalFileClient.java of the component RestController. Performing a manipulation of the argument uniqueFileName results in path traversal. The attack may be carried out on the physical device. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Oinone Pamirs users with physical access to the device are at medium risk of path traversal attacks, which can lead to data breaches or system compromise.
Monitor & Review
Low severity — keep this CVE on your radar and patch during routine maintenance.
What should I do?
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
0
Affected Products
4
References
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Exploitability
Impact