Drive Composer Path Traversal Vulnerability
An update is available that resolves vulnerability in the product versions as affected in this advisory. An attacker who successfully exploits the vulnerability could get unauthorized access to the file system on the host machine. This can lead to the execution of arbitrary code, data leakage, or even complete system compromise.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-48510US | critical9.8 | Exploit | ||
Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: Thi… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- FixedDrive Composer entry
The vulnerability mentioned in this advisory has been corrected in Drive Composer version 2.9.1. Drive Composer version 2.9.1 (both entry and pro) is downloadable from the product page: https://new.abb.com/drives/software-tools/drive-composer ABB recommends that customers apply the update at earliest convenience.
https://new.abb.com/drives/software-tools/drive-composer - FixedDrive Composer pro
The vulnerability mentioned in this advisory has been corrected in Drive Composer version 2.9.1. Drive Composer version 2.9.1 (both entry and pro) is downloadable from the product page: https://new.abb.com/drives/software-tools/drive-composer ABB recommends that customers apply the update at earliest convenience.
https://new.abb.com/drives/software-tools/drive-composer
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan