Skip to content
CVE Tracker
Back

CVE-2017-20184

Carlo Gavazzi Powersoft prone to Path Traversal

High7.5EPSS 2.8%
Published
Updated
Reserved
Assigned by
CERTVDE

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Carlo Gavazzi Powersoft up to version 2.1.1.1 allows an unauthenticated, remote attacker to download any file from the affected device.

Scores

CVSS scores of CVE-2017-20184, by who scored it
Scored byCVSSScoreVector
CERTVDECNA (assigner)3.1High7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA-ADPADP (enrichment)3.1High7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVDNVD · Modified3.1High7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS (exploitation in 30 days)
2.8% · top 14% of all CVEs (3 Nov 2026)
CISA SSVC
Exploitation: poc · Automatable: yes · Technical impact: partial

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

Affected products

  • Carlo Gavazzi · Powersoft

    • affected ≤ 2.1.1.1

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .