CVE-2025-47423
Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/_test.php,…
Published: 2025-05-07 · CVSS: 5.8 · CVSS 3.1
Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/_test.php, as demonstrated by reading the server's private SSL key in cleartext.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7