Vulnerabilidades de ZwickRoell GmbH & Co. KG

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de ZwickRoell GmbH & Co. KG: 1 registro(s), com severidade, exploração e correções.

Test Data Management 1

Somente exploradas (KEV) →

CVE-2026-29522 Alta · 8.7 CWE-22 16/03/2026

ZwickRoell Test Data Management < 3.0.8 Path Traversal LFI

ZwickRoell Test Data Management versions prior to 3.0.8 contain a local file inclusion (LFI) vulnerability in the /server/node_upgrade_srv.js endpoint. An unauthenticated attacker can supply directory traversal sequences via the firmware parameter to access arbitrary files on the server, leading to information disclosure of sensitive system files.