CVE-2020-11420 - CVE House
Back to Database
Status published Medium CVE-2020-11420

UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker...

Vulnerability Description

UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker with Admin or Engineer login credentials could exploit the vulnerability by manipulating variables that reference files and by doing this achieve access to files and directories outside the web root folder. An attacker may access arbitrary files and directories stored in the file system, but integrity of the files are not jeopardized as attacker have read access rights only.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-11420

Credits & Attribution

No credits recorded in the NVD database.

References

More from abb

View All →
CVE-2019-7232
The ABB IDAL HTTP server is vulnerable to a buffer...
High 8.8
CVE-2019-7231
The ABB IDAL FTP server is vulnerable to a buffer...
Medium 5.7
CVE-2019-7230
The ABB IDAL FTP server mishandles format strings in a...
High 8.8
CVE-2019-7229
The ABB CP635 HMI uses two different transmission methods to...
High 8.3
CVE-2019-7228
The ABB IDAL HTTP server mishandles format strings in a...
High 8.8

Affected Vendor

Affected Software

cs141 firmware
Vulnerable Versions:
1.66, 0

Timeline

Official Publish: April 27th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.