Vulnerability · Published Oct 4, 2023 · Assigned by INCIBE
CVE-2023-3512Relative path traversal in Setelsa Security ConacWin CB
High 7.5
In plain English
A high-severity security flaw in ConacWin CB from Setelsa Security. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.7%top 47.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Setelsa Security | ConacWin CB | 0 – through 3.8.2.2 |
Weakness: CWE-23 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N