CVE-2012-1466

MEDIUM 5.0CVE-2012-1466 · Published 19/03/2012 · updated 16/06/2026

In short

CVE-2012-1466 is a MEDIUM (CVSS 5.0) vulnerability affecting netdecision (netmechanica).
Chance of exploitation in the next 30 days (EPSS): 3.3%, higher than 88.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
netdecision netmechanica	`≤ 4.5.1`	No fix yet

Description

The Traffic Grapher Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the source code of NtDecision script files with a .nd extension via an invalid version number in an HTTP request, as demonstrated using default.nd. NOTE: some of these details are obtained from third party information.

References

osvdb.org/79652
secpod.org/advisories/SecPod_Netmechanica_NetDecision_Traffic_Grapher_Server_SourceCode_Disc_Vuln.txt
secpod.org/blog · Exploit
secunia.com/advisories/48168 · Vendor Advisory
exploit-db.com/exploits/18542 · Exploit
netmechanica.com/news
securityfocus.com/bid/52196 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/73531

More vulnerabilities in netdecision

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free