{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2019-25610", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-03-22T13:16:05.278Z", "datePublished": "2026-03-22T13:38:43.975Z", "dateUpdated": "2026-03-23T15:54:58.218Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-03-22T13:38:43.975Z"}, "datePublic": "2019-04-29T00:00:00.000Z", "title": "NetNumber Titan Master 7.9.1 Path Traversal via drp", "descriptions": [{"lang": "en", "value": "NetNumber Titan Master 7.9.1 contains a path traversal vulnerability in the drp endpoint that allows authenticated users to download arbitrary files by injecting directory traversal sequences. Attackers can manipulate the path parameter with base64-encoded payloads containing ../ sequences to bypass authorization and retrieve sensitive system files like /etc/shadow."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "cweId": "CWE-22", "type": "CWE"}]}], "affected": [{"vendor": "Netnumber", "product": "NetNumber Titan ENUM/DNS/NP", "versions": [{"version": "7.9.1", "status": "affected"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 7.1, "baseSeverity": "HIGH", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS"}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS"}], "references": [{"url": "https://www.exploit-db.com/exploits/46811", "name": "ExploitDB-46811", "tags": ["exploit"]}, {"url": "https://www.netnumber.com/products/#data", "name": "Official Product Homepage", "tags": ["product"]}, {"name": "VulnCheck Advisory: NetNumber Titan Master 7.9.1 Path Traversal via drp", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/netnumber-titan-master-path-traversal-via-drp"}], "credits": [{"lang": "en", "value": "MobileNetworkSecurity", "type": "finder"}], "x_generator": {"engine": "vulncheck"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-23T15:54:37.619653Z", "id": "CVE-2019-25610", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-23T15:54:58.218Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "NetNumber Titan Master 7.9.1 Path Traversal via drp", "credits": [{"lang": "en", "type": "finder", "value": "MobileNetworkSecurity"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Netnumber", "product": "NetNumber Titan ENUM/DNS/NP", "versions": [{"status": "affected", "version": "7.9.1"}]}], "datePublic": "2019-04-29T00:00:00.000Z", "references": [{"url": "https://www.exploit-db.com/exploits/46811", "name": "ExploitDB-46811", "tags": ["exploit"]}, {"url": "https://www.netnumber.com/products/#data", "name": "Official Product Homepage", "tags": ["product"]}, {"url": "https://www.vulncheck.com/advisories/netnumber-titan-master-path-traversal-via-drp", "name": "VulnCheck Advisory: NetNumber Titan Master 7.9.1 Path Traversal via drp", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck"}, "descriptions": [{"lang": "en", "value": "NetNumber Titan Master 7.9.1 contains a path traversal vulnerability in the drp endpoint that allows authenticated users to download arbitrary files by injecting directory traversal sequences. Attackers can manipulate the path parameter with base64-encoded payloads containing ../ sequences to bypass authorization and retrieve sensitive system files like /etc/shadow."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-03-22T13:38:43.975Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2019-25610", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-23T15:54:37.619653Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-03-23T15:54:50.828Z"}}]}, "cveMetadata": {"cveId": "CVE-2019-25610", "state": "PUBLISHED", "dateUpdated": "2026-03-22T13:38:43.975Z", "dateReserved": "2026-03-22T13:16:05.278Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2026-03-22T13:38:43.975Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "NetNumber Titan Master 7.9.1 contains a path traversal vulnerability in the drp endpoint that allows authenticated users to download arbitrary files by injecting directory traversal sequences. Attackers can manipulate the path parameter with base64-encoded payloads containing ../ sequences to bypass authorization and retrieve sensitive system files like /etc/shadow."}, {"lang": "es", "value": "NetNumber Titan Master 7.9.1 contiene una vulnerabilidad de salto de ruta en el endpoint drp que permite a usuarios autenticados descargar archivos arbitrarios inyectando secuencias de salto de directorio. Los atacantes pueden manipular el par\u00e1metro path con payloads codificados en base64 que contienen secuencias ../ para eludir la autorizaci\u00f3n y recuperar archivos de sistema sensibles como /etc /shadow."}], "id": "CVE-2019-25610", "lastModified": "2026-04-16T16:19:50.757", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "disclosure@vulncheck.com", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}]}, "published": "2026-03-22T14:16:29.180", "references": [{"source": "disclosure@vulncheck.com", "url": "https://www.exploit-db.com/exploits/46811"}, {"source": "disclosure@vulncheck.com", "url": "https://www.netnumber.com/products/#data"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/netnumber-titan-master-path-traversal-via-drp"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "disclosure@vulncheck.com", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.9.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "NetNumber Titan ENUM/DNS/NP", "source": "cna", "vendor": "Netnumber"}, "product": "netnumber_titan_enum/dns/np", "vendor": "netnumber"}], "analysis": {"en": {"generated_at": "2026-03-22T14:38:33.932485+00:00", "value": {"mitigation_remediation": ["Upgrade NetNumber Titan Master to a patched version that fixes the path traversal issue.", "If no patch is available, restrict access to the drp endpoint to trusted administrators only, and monitor for unauthorized access attempts.", "Verify that file download requests are validated and constrained to legitimate paths, preventing directory traversal by sanitizing input and rejecting encoded traversal sequences."], "summary": {"action": "Immediate Patch", "impact": "Confidentiality breach via arbitrary file download"}, "threat_synthesis": {"affected_systems": "The vulnerability affects NetNumber Titan Master version 7.9.1, an ENUM/DNS/NP management platform provided by NetNumber. No other versions are referenced in this report.", "description_and_impact": "NetNumber Titan Master 7.9.1 contains a path traversal vulnerability in the drp endpoint that enables authenticated users to download arbitrary files. By injecting base64-encoded payloads with \"../\" sequences, attackers can bypass normal authorization and retrieve sensitive system files such as /etc/shadow, compromising the confidentiality of the system.", "risk_and_exploitability": "The CVSS score of 7.1 indicates high severity, while the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires valid authentication, so attackers need legitimate credentials or must first compromise an account. The attack vector is likely through the HTTP API exposed by the drp endpoint, and the vulnerability can be exploited by supplying crafted base64 encoded paths that resolve to arbitrary files on the system."}}}}, "created": "2026-03-23T09:46:10.592928+00:00", "updated": "2026-03-25T14:46:06.384032+00:00", "vendors": ["netnumber", "netnumber$PRODUCT$netnumber_titan_enum/dns/np"]}