VYPR
← All advisories
Medium severity6.5NVD Advisory· Published May 7, 2020· Updated Jun 17, 2026

CVE-2019-18870

CVE-2019-18870

Description

A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host machine.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Blaauw/Remote Kiln Controlllm-create
    Range: <=3.00r4
  • Blaauw/Remote Kiln Controldescription
  • Blaauwproducts/Remote Kiln Control3 versions
    cpe:2.3:a:blaauwproducts:remote_kiln_control:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:blaauwproducts:remote_kiln_control:*:*:*:*:*:*:*:*range: <3.0.0
    • cpe:2.3:a:blaauwproducts:remote_kiln_control:3.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:blaauwproducts:remote_kiln_control:3.0.0:v4:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.