| |
Vulnerability CVE-2022-4636
Published: 2023-01-10
| Description: |
Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to path traversal, which may allow an attacker to steal user credentials and other sensitive information through local file inclusion. |
Type:
CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
References: |
https://www.cisa.gov/uscert/ics/advisories/icsa-23-010-01
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
