APC Network Management Card 4 Path Traversal Vulnerability

A path traversal vulnerability has been identified in APC Network Management Card 4. This vulnerability allows unauthenticated attackers to access sensitive system files by manipulating URL parameters. Exploiting directory traversal techniques, attackers can read critical system files such as /etc/passwd by using encoded path traversal characters in HTTP requests.

Impact

Exploitation of this vulnerability allows for unauthorized access to sensitive system files, potentially leading to further attacks or information disclosure.

Reproduction

The vulnerability can be reproduced by sending an HTTP request to the device with encoded path traversal characters in the URL. This request can be made using a tool like curl. The exploited URL should include the traversal characters needed to navigate to the /etc/passwd file.