CVE-2019-18253

10.0 criticalEPSS 2.0%

An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series (versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior) outside the intended directory.

Severity

CVSS 3.1

10.0 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2019-11-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hitachienergy:relion_670_firmware

References

https://www.us-cert.gov/ics/advisories/icsa-19-330-01
https://www.us-cert.gov/ics/advisories/icsa-19-330-01

Check your stack JSON