Known CVE

CAREL Boss Mini <= 1.4.0 - Local File Inclusion

Boss Mini 1.4.0 Build 6221 contains a file inclusion caused by manipulation of the 'path' argument in boss/servlet/document, letting remote attackers include arbitrary files, exploit requires remote access.

CVE-2023-3643

Critical2023CVSS 9.8CWE-22

cve2023 · lfi · carel · boss-mini · ics · path-traversal · file-inclusion

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website