Unscored CVE-2017-11587 EUVD-2017-3202GHSA-w2xx-4cpj-crmx

On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-An…

Published Jul 24, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is directory traversal in the filename parameter to the /download.conf URI.

References

100484 vdb-entry
http://seclists.org/fulldisclosure/2017/Jul/26