CVE-2024-41511

low-risk
Published 2024-10-04

A Path Traversal (Local File Inclusion) vulnerability in "BinaryFileRedirector.ashx" in CADClick v1.11.0 and before allows remote attackers to retrieve arbitrary local files via the "path" parameter.

Do I need to act?

-
0.22% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.9/10 Low
LOCAL / LOW complexity

Affected Products (1)

Cadclick

Affected Vendors

4Pace

References (3)

Product http://cadclick.de/
Product http://kimweb.de/
Exploit https://piuswalter.de/blog/multiple-critical-vulnerabilities-in-cadclick/
20
/ 100
low-risk
Severity 14/34 · Moderate
Exploitability 1/34 · Minimal
Exposure 5/34 · Minimal