Intrusion Prevention

WebNMS.Framework.Directory.Traversal

Description

This indicates an attack attempt to exploit a Directory Traversal vulnerability in WebNMS Framework.
The vulnerability is caused by improper validation of user supplied data when the vulnerable application handles a maliciously crafted request. An attacker can exploit this to execute arbitrary code in the context of the vulnerable application via a crafted request.

Affected Products

WebNMS Framework 5.2 and 5.2 SP1

Impact

System Compromise: Remote attackers can gain control of vulnerable systems

Recommended Actions

Apply the most recent upgrade or patch from the vendor
https://www.webnms.com/telecom/framework.html

CVE References

CVE-2016-6601 CVE-2016-6600