Kedacom Network Keyboard Console Arbitrary File Read Scanner

The Kedacom Network Keyboard Console is a hardware device used by network administrators to manage and configure network systems in industries like security and traffic management. It provides a physical interface for real-time monitoring and control of network components, ensuring seamless communication and workflow optimization. Its reliability makes it a preferred choice for large-scale networking environments requiring robust security measures.

The vulnerability is a Local File Inclusion (LFI) issue that arises when the console constructs file paths using untrusted user input without proper validation. This allows attackers to manipulate file path parameters to include arbitrary files from the server's file system. LFI vulnerabilities often stem from insufficient input sanitization in web interfaces or APIs.

Specifically, the vulnerable endpoint is the file retrieval function in the console's web interface, where parameters like 'file' or 'path' are passed without validation. Attackers can inject traversal sequences such as '../' to read sensitive files like /etc/passwd or application configuration files. This occurs due to a lack of whitelisting or filtering of allowed file paths.

If exploited, an attacker can read sensitive data including credentials, system configurations, and proprietary information. This could lead to further attacks such as privilege escalation or lateral movement within the network. The impact is severe, as it compromises confidentiality and can undermine the security of the entire network infrastructure.