CVE-2018-10956: IPConfigure Orchid Core VMS Directory Traversal

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 19 September 2026. Confidence: medium.

high priorityUnauthenticated network-reachable file disclosure with public exploit code and very high EPSS, though no KEV listing or confirmed in-the-wild use is documented.

What it is

IPConfigure Orchid Core VMS 2.0.5 is vulnerable to directory traversal (CWE-22), allowing an unauthenticated remote attacker to read files outside the intended web root. The flaw is network-reachable with no privileges or user interaction required, and public exploit code exists, making it a practical information-disclosure risk for exposed VMS deployments.

Impact

An attacker can read arbitrary files on the server, potentially exposing configuration data, credentials, or recorded video metadata. The CVSS vector shows high confidentiality impact only, with no integrity or availability effect.

Attack surface

Reachable over the network via HTTP against the Orchid Core VMS web interface; the CVSS vector (AV:N/PR:N/UI:N) indicates no authentication or user interaction is needed. The description does not specify the exact vulnerable endpoint or parameter.

Exploitation

Public exploit code is referenced on Packet Storm and Exploit-DB, and EPSS is 0.54967 (98.9th percentile), indicating elevated likelihood of exploitation. The CVE is not listed in CISA KEV, so no confirmed in-the-wild activity is documented in this record.

What to do

• Upgrade Orchid Core VMS to a version later than 2.0.5 if the vendor has released a fix; the record does not list a patched version.
• Restrict network access to the Orchid Core VMS web interface using firewall rules or a VPN, and avoid exposing it directly to the internet.
• Run the VMS service with least privilege and in a segmented network so file reads are limited to non-sensitive paths.
• Monitor vendor advisories for IPConfigure Orchid Core VMS for a confirmed patch or workaround.

Detection

• Inspect web server and application logs for HTTP requests containing traversal sequences such as ../, ..%2f, or encoded variants.
• Alert on requests to the Orchid Core VMS interface from unexpected source IPs or at unusual times.
• Use file integrity monitoring on sensitive directories to detect unexpected reads or access patterns.
• Review outbound or local file access by the VMS process for paths outside its normal data directories.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.