Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-47423

Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/_test.php, as demonstrated by reading the server's private SSL key in cleartext.

Published

2025-05-07T18:15:43.393

Last Modified

2025-05-08T14:39:09.683

Status

Awaiting Analysis

Source

[email protected]

Severity

CVSSv3.1: 5.8 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-24
Affected Vendors & Products

-

References