Eaton NMC G2 Path Traversal Vulnerability Allowing Unauthorized File Modification

A path traversal vulnerability has been identified in Eaton's NMC G2, allowing authenticated and privileged users to modify the contents of a non-sensitive file. This issue arises from the limited shell environment of the command-line interface (CLI), where the file path can be manipulated. The vulnerability has been addressed in the latest version of NMC G2, available on the Eaton download center.

Impact

Exploitation of this vulnerability could lead to unauthorized modification of file contents, potentially causing disruption or misuse of the affected system.

Remediation

Users are advised to update to the latest version of NMC G2, available on the Eaton download center.