A critical directory traversal vulnerability in Riello NetMan 208 allows authenticated attackers to execute arbitrary code on affected systems.

The vulnerability exists in the cgi-bin/certsupload.cgi script, which fails to properly sanitize input, allowing path traversal. While the CVSS vector (PR:H) indicates that administrative privileges are required, successful exploitation results in full system compromise.

The ability to execute arbitrary code poses a severe risk to operational technology environments where Riello UPS units are deployed. Successful exploitation could lead to full loss of system availability, unauthorized access to internal networks, or the permanent disabling of power management infrastructure. The 9.1 CVSS score reflects the potential for total system compromise.

Immediate Action: Restrict access to the web management interface to trusted administrative networks only and await the vendor-provided patch for version 1.12 or later.

Proactive Monitoring: Monitor management interface access logs for suspicious POST requests to certsupload.cgi containing directory traversal sequences such as ../.

Compensating Controls: Deploy a Web Application Firewall (WAF) to block requests containing path traversal patterns directed at the management interface.

Public Exploit Available: Unknown.

Given the potential for remote code execution, this vulnerability represents a significant risk to industrial control environments. Administrators should prioritize isolating affected NetMan 208 units from public-facing networks immediately and apply the vendor-recommended update as soon as it is verified for deployment.