An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/159699/QSC-Q-SYS-Core-Manager-8.2.1-Directory-Traversal.html | Third Party Advisory VDB Entry |
| http://seclists.org/fulldisclosure/2020/Oct/30 | Mailing List Third Party Advisory |
| https://q-syshelp.qsc.com/Content/Core_Manager/CoreManager_Overview.htm | Vendor Advisory |
| http://packetstormsecurity.com/files/159699/QSC-Q-SYS-Core-Manager-8.2.1-Directory-Traversal.html | Third Party Advisory VDB Entry |
| http://seclists.org/fulldisclosure/2020/Oct/30 | Mailing List Third Party Advisory |
| https://q-syshelp.qsc.com/Content/Core_Manager/CoreManager_Overview.htm | Vendor Advisory |
Configurations
History
21 Nov 2024, 05:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/159699/QSC-Q-SYS-Core-Manager-8.2.1-Directory-Traversal.html - Third Party Advisory, VDB Entry | |
| References | () http://seclists.org/fulldisclosure/2020/Oct/30 - Mailing List, Third Party Advisory | |
| References | () https://q-syshelp.qsc.com/Content/Core_Manager/CoreManager_Overview.htm - Vendor Advisory |
Information
Published : 2020-10-28 19:15
Updated : 2024-11-21 05:16
NVD link : CVE-2020-24990
Mitre link : CVE-2020-24990
CVE.ORG link : CVE-2020-24990
JSON object : View
Products Affected
qsc
- q-sys_core_manager
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')