CVE-2026-5703
Path Traversal in Satel Iberia SenNet Datalogger Serie 200
- State
- Published
- Severity
- 7.1 High
- Published
- Oct 7, 2026
- Updated
- Oct 7, 2026
- Reserved
- Apr 6, 2026
Description
Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the URL to include a path traversal payload. Successful exploitation of this vulnerability could allow an attacker to access critical system files containing confidential information.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.1 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | INCIBE |
Weaknesses
- CWE-35 Path traversal: '.../...//'
Affected Products
| Product | Versions |
|---|---|
SenNet Datalogger Serie 200Satel Iberia |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.