CVE-2016-9339

5.3 mediumEPSS 1.7%

An issue was discovered in INTERSCHALT Maritime Systems VDR G4e Versions 5.220 and prior. External input is used to construct paths to files and directories without properly neutralizing special elements within the pathname that could allow an attacker to read files on the system, a Path Traversal.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2017-02-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

macgregor:interschalt_vdr_g4e_firmware

References

http://www.securityfocus.com/bid/94776
https://ics-cert.us-cert.gov/advisories/ICSA-16-343-04
http://www.securityfocus.com/bid/94776
https://ics-cert.us-cert.gov/advisories/ICSA-16-343-04

Check your stack JSON