CVE-2023-6919

Published: Jan 26, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: iletisim@usom.gov.tr (Secondary)

Description

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C.

Affected (9)

Products: Biges: Vg 4c1a Lru Firmware, Vg 4c1a Lrpu Firmware, Vg 255a Bf Firmware, Vg 255 Bv Firmware, Vg 255 Df Firmware, Vg 64c8rd Nvr Firmware, Vg 4c1e Nvr Firmware, Vg 8c1e Nvr Firmware, Vg 8c1a Lrpu Firmware

Biges

9 products

Vg 4c1a Lru Firmware

Vg 4c1a Lrpu Firmware

Vg 255a Bf Firmware

Vg 255 Bv Firmware

Vg 255 Df Firmware

Vg 64c8rd Nvr Firmware

Vg 4c1e Nvr Firmware

Vg 8c1e Nvr Firmware

Vg 8c1a Lrpu Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Biges Vg 4c1a Lru Firmware	Before 500.0003.r008.4011.c0012.b351.c

Running on/with	Platform Versions
Biges Vg 4c1a Lru	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Biges Vg 4c1a Lrpu Firmware	Before 500.0003.r008.4011.c0012.b351.c

Running on/with	Platform Versions
Biges Vg 4c1a Lrpu	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Biges Vg 255a Bf Firmware	Before 500.0003.r008.4011.c0012.b351.c

Running on/with	Platform Versions
Biges Vg 255a Bf	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Biges Vg 255 Bv Firmware	Before 500.0003.r008.4011.c0012.b351.c

Running on/with	Platform Versions
Biges Vg 255 Bv	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Biges Vg 255 Df Firmware	Before 500.0003.r008.4011.c0012.b351.c

Running on/with	Platform Versions
Biges Vg 255 Df	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Biges Vg 64c8rd Nvr Firmware	Before 500.0003.r008.4011.c0012.b351.c

Running on/with	Platform Versions
Biges Vg 64c8rd Nvr	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Biges Vg 4c1e Nvr Firmware	Before 500.0003.r008.4011.c0012.b351.c

Running on/with	Platform Versions
Biges Vg 4c1e Nvr	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Biges Vg 8c1e Nvr Firmware	Before 500.0003.r008.4011.c0012.b351.c

Running on/with	Platform Versions
Biges Vg 8c1e Nvr	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Biges Vg 8c1a Lrpu Firmware	Before 500.0003.r008.4011.c0012.b351.c

Running on/with	Platform Versions
Biges Vg 8c1a Lrpu	All versions

Related CWEs

CWE-25

Path Traversal: '/../filedir'

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize "/../" sequences that can resolve to a location that is outside of that directory.

References (3)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0054

Source: iletisim@usom.gov.tr

https://www.usom.gov.tr/bildirim/tr-24-0054

Source: iletisim@usom.gov.tr

Third Party Advisory

https://www.usom.gov.tr/bildirim/tr-24-0054

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.