CVE-2018-20470
72Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 46%
from disclosure to weapon1 days
Published on NVDJun 17
1st PoC+1d
VulnCheck+1655d
exploitation probability
46%top 1% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnerability exists in the web reports module. This allows an outside attacker to view contents of sensitive files.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/47005unverifiedcve_referencepacketstormsecurity.com/files/153330/Sahi-Pro-7.x-8.x-Directory-Traversal.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.