medium5.0Public exploit code
CVE-2011-4716
Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DreamBox DM800 - 'file' Local File Disclosure2011-11-04 · webapps · hardware · Verified
- DreamBox DM800 - Arbitrary File Download2011-06-21 · remote · hardware · Verified
- DreamBox DM800 1.5rc1 - File Disclosure2011-11-04 · remote · hardware
Impact
Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dream-Multimedia-Tv | Dreambox Dm800 Hd Se Firmware | through 1.6 Version 1.5 |
| Dream-Multimedia-Tv | Dreambox Dm800 Hd Se | All versions |
| Dream-Multimedia-Tv | Dreambox Dm800 Hd Pvr Firmware | Versions 1.5, 1.6 |
| Dream-Multimedia-Tv | Dreambox Dm800 Hd Pvr | All versions |