A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensitive information about the configured databases via the "/file" endpoint.
References
| Link | Resource |
|---|---|
| http://www.mclv4.mcl-collection.com/index.php | Product |
| https://www.exploit-db.com/exploits/51542 | Exploit Third Party Advisory VDB Entry |
| http://www.mclv4.mcl-collection.com/index.php | Product |
| https://www.exploit-db.com/exploits/51542 | Exploit Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 08:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.mclv4.mcl-collection.com/index.php - Product | |
| References | () https://www.exploit-db.com/exploits/51542 - Exploit, Third Party Advisory, VDB Entry |
11 Jul 2023, 18:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) http://www.mclv4.mcl-collection.com/index.php - Product | |
| References | (MISC) https://www.exploit-db.com/exploits/51542 - Exploit, Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:o:mcl-collection:mcl-net_firmware:4.3.5.8788:*:*:*:*:*:*:* cpe:2.3:h:mcl-collection:mcl-net:-:*:*:*:*:*:*:* |
|
| First Time |
Mcl-collection
Mcl-collection mcl-net Firmware Mcl-collection mcl-net |
|
| CWE | NVD-CWE-Other | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
29 Jun 2023, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-29 03:15
Updated : 2024-11-21 08:07
NVD link : CVE-2023-34834
Mitre link : CVE-2023-34834
CVE.ORG link : CVE-2023-34834
JSON object : View
Products Affected
mcl-collection
- mcl-net_firmware
- mcl-net
CWE