vendor:
Battery Energy Management System
by:
LiquidWorm
7,5
CVSS
HIGH
Arbitrary File Download
22
CWE
Product Name: Battery Energy Management System
Affected Version From: 1.21
Affected Version To: 1.21
Patch Exists: NO
Related CWE: N/A
CPE: a:longjing_technology:battery_energy_management_system:1.21
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: nginx/1.19.1
2021
Longjing Technology BEMS API 1.21 – Remote Arbitrary File Download
The application suffers from an unauthenticated arbitrary file download vulnerability. Input passed through the fileName parameter through downloads endpoint is not properly verified before being used to download files. This can be exploited to disclose the contents of arbitrary and sensitive files through directory traversal attacks.
Mitigation:
Input validation should be performed to verify that the fileName parameter is not being used to access files outside of the intended directory.
