CVE-2024-55457

MasterSAM Star Gate 11 is affected by CVE-2024-55457, a directory traversal vulnerability (CWE-22) in the /adama/adama/downloadService endpoint. Published on 2025-02-20, this issue has a CVSS v3.1 base score of 6.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). An attacker can exploit it by manipulating the file parameter in requests to the service, enabling access to arbitrary files on the server and potentially exposing sensitive information.

Remote attackers require no authentication or privileges (PR:N) and can exploit this over the network (AV:N) with low attack complexity (AC:L) and no user interaction (UI:N). Successful exploitation allows limited confidentiality impact, such as reading sensitive files, and limited integrity impact, with no availability disruption.

A proof-of-concept exploit is available at https://github.com/h13nh04ng/CVE-2024-55457-PoC. No vendor advisories or patches are detailed in available references.