CyberRota Analysis
AI-GeneratedA path traversal vulnerability exists in the IHM log handling of ADM, allowing authenticated attackers to manipulate user-controlled disk serial input to access unintended filesystem paths or log database files. This could lead to unauthorized data exposure or modification, posing a significant risk to the integrity of the system. Organizations using ADM versions 4.1.0 to 4.3.3.RUN1 and 5.0.0 to 5.1.3.RI81 should prioritize remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause the affected component to access an unintended filesystem path or log database file. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.
Related CVEs
Other vulnerabilities affecting the same vendor(s)