CVE-2023-0113mediumCWE-200

CVE-2023-0113: medium-severity vulnerability in Netis Netcore Router

Netis Netcore Router Backup param.file.tgz information disclosure

Published · Updated

Follow this CVE+ Monitor Netcore Router

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.8%
A vulnerability was found in Netis Netcore Router up to 2.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-217591.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Netis · Netcore Router
Related CVEs — Netis Netcore Router

In the same product, most dangerous first.

CVE-2018-25069HIGHNetis Netcore Router hard-coded passwordEPSS 0.9%CVE-2023-0114LOWNetis Netcore Router Backup param.file.tgz cleartext storage in a file or on diskEPSS 0.1%