Emerson Network Power Avocent MergePoint Unity 2016 KVM Directory Traversal Vulnerability

  1. Network Vulnerabilities
  2. Web application abuses
  3. Emerson Network Power Avocent MergePoint Unity 2016 KVM Directory Traversal Vulnerability
Summary
Emerson Network Power Avocent MergePoint Unity 2016 KVM is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Impact
A remote attacker can exploit this issue to obtain sensitive information that could aid in further attacks.
Solution
Updates are available.
Insight
Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 (aka MPU2016) KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file.
Affected
Emerson Network Power Avocent MergePoint Unity 2016 KVM firmware 1.9.16473 is vulnerable other versions may also be affected.
Detection
Check the firmware version.
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities