Thermo Fisher Torrent Suite Software
Summary
Thermo Fisher Torrent Suite Software versions less than or equal to 5.18 are affected by a path traversal vulnerability. Successful exploitation allows an authenticated attacker to read arbitrary files on the Torrent Server.
IFF Assessment
The identified vulnerability allows unauthorized file reading, posing a risk to data confidentiality for defenders.
Severity
The CVSS v3.1 score of 6.5 (MEDIUM) reflects a Network attack vector (AV:N), Low complexity (AC:L), requiring Low privileges (PR:L), with no user interaction needed (UI:N), and unchanged scope (S:U). The impact on confidentiality is High (C:H), with no impact on integrity (I:N) or availability (A:N).
Defender Context
This vulnerability in Thermo Fisher Torrent Suite Software allows for arbitrary file reading, potentially exposing sensitive system information. Defenders should prioritize patching to version 5.22 or later and monitor for unauthorized file access attempts on affected systems within the Healthcare and Public Health sectors.