Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to path traversal, which may allow an attacker to steal user credentials and other sensitive information through local file inclusion.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
KVM ACR1020A-T
Vendor
Black Box
Product
KVM ACR1020A-T
Platforms
Unknown
Default status
unaffected
KVM ACR1020A-T · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.4.31307
affected
Unavailable
Unavailable
Unavailable
None listed
KVM ACR1002A-R
Vendor
Black Box
Product
KVM ACR1002A-R
Platforms
Unknown
Default status
unaffected
KVM ACR1002A-R · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.4.31307
affected
Unavailable
Unavailable
Unavailable
None listed
KVM ACR1002A-T
Vendor
Black Box
Product
KVM ACR1002A-T
Platforms
Unknown
Default status
unaffected
KVM ACR1002A-T · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.4.31307
affected
Unavailable
Unavailable
Unavailable
None listed
KVM ACR1000A-T-R2
Vendor
Black Box
Product
KVM ACR1000A-T-R2
Platforms
Unknown
Default status
unaffected
KVM ACR1000A-T-R2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.4.31307
affected
Unavailable
Unavailable
Unavailable
None listed
KVM ACR1000A-R-R2
Vendor
Black Box
Product
KVM ACR1000A-R-R2
Platforms
Unknown
Default status
unaffected
KVM ACR1000A-R-R2 · Scoped product and version facts