CVE:CVE-2016-9364
CNNVD:CNNVD-201612-635
Fidelix FX-20 series controllers是芬兰Fidelix公司的FX-20系列建筑控制器产品。
Fidelix FX-20 series controllers 11.50.19之前的版本中存在目录遍历漏洞，该漏洞源于程序没有充分地过滤用户提交的输入。攻击者可利用该漏洞获取敏感信息。
solution:Upgrade fidelex fx-2030a_firmware to a higher version than 11.50.18,and avoid the version (,11.50.18]; Upgrade fidelex fx-2030a-basic_firmware to a higher version than 11.50.18,and avoid the version 11.50.18