CVE-2024-6746

CVE-2024-6746 is a high-severity path traversal vulnerability affecting NaiboWang EasySpider 0.6.2 on Windows, specifically within the HTTP GET Request Handler component. An unauthenticated attacker on the local network can manipulate input to access arbitrary files, such as win.ini, leading to potential compromise of confidentiality, integrity, and availability. While the vendor downplays its severity due to local execution, public exploit details are available, including Nuclei templates for arbitrary file read, though there is no evidence of active exploitation or widespread community discussion.