Valmet DNA Web Tools Arbitrary File Read Vulnerability

A vulnerability allowing arbitrary file read access has been identified in Valmet DNA Web Tools, specifically in versions C2022 and earlier. This issue can be exploited by an unauthenticated attacker who manipulates the URL to access restricted files.

Impact

Exploitation of this vulnerability allows unauthorized users to read arbitrary files on the web server, potentially leading to the disclosure of sensitive information.

Remediation

Users can contact Valmet Automation Customer Service for the solution. Additionally, a properly configured firewall can help prevent unauthorized access from untrusted networks.