CVE:CVE-2019-7387
CNNVD:CNNVD-201902-049
Systrome Cumilon ISG-600C等都是印度SYSTORME公司的一款集成安全网关设备。
Systrome Cumilon ISG-600C、ISG-600H和ISG-800W中的Web界面存在目录遍历漏洞。攻击者可利用该漏洞读取任意文件。以下产品和版本受到影响：使用1.1-R2.1_TRUNK-20180914版本固件的Systrome Cumilon ISG-600C；使用1.1-R2.1_TRUNK-20180914版本固件的ISG-600H；使用1.1-R2.1_TRUNK-20180914版本固件的ISG-800W。
solution:Upgrade systrome isg-600c_firmware to a higher version than 1.1-r2.1_trunk-20180914,and avoid the version 1.1-r2.1_trunk-20180914; Upgrade systrome isg-600h_firmware to a higher version than 1.1-r2.1_trunk-20180914,and avoid the version 1.1-r2.1_trunk-20180914; Upgrade systrome isg-800w_firmware to a higher version than 1.1-r2.1_trunk-20180914,and avoid the version 1.1-r2.1_trunk-20180914