Digitek Path Traversal Vulnerability Allowing Arbitrary File Access

A path traversal vulnerability has been identified in Digitek ADT1100 and Digitek DT950, products of PRIMION DIGITEK, S.L.U (Azkoyen Group). This vulnerability enables an attacker to access arbitrary files on the server's file system by exploiting URL-encoded directory traversal sequences. The issue arises from inadequate input validation, allowing sensitive files, such as the password file, to be retrieved. This could result in unauthorized information disclosure or further system compromise.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server, potentially allowing for information disclosure or additional system compromise.

Remediation

The vulnerability has been fixed in the latest version of the affected products.