CVE-2023-32767: Symcon IP Symcon

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The web interface of Symcon IP-Symcon before 6.3 (i.e., before 2023-05-12) allows a remote attacker to read sensitive files via .. directory-traversal sequences in the URL.

Affected products

• Symcon IP Symcon: before 6.3 (fixed in 6.3)

Published 2023-05-17. Last modified 2026-06-17.