Unscored severity · published Dec 1, 2011
CVE-2011-4001
Directory traversal vulnerability in HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to read and modify arbitrary files via unspecified vectors
–
CVSS
1.5%
EPSS
No
On KEV
Description
Directory traversal vulnerability in HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to read and modify arbitrary files via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NI
Nikki · Mawashimono
through 6.6; 1.1; 1.2; 1.3; 1.4; 1.5; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4001
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4001
jvn.jp
http://jvn.jp/en/jp/JVN80081509/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000075
More from Nikki
–
CVE-2011-4002
HP no Mawashimono Nikki 6.6 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."