high7.5Public exploit code
CVE-2017-11456
Geneko GWR routers allow directory traversal sequences starting with a /../ substring, as demonstrated by unauthenticated read access to the configuration file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Geneko Routers - Path Traversal2017-07-16 · webapps · hardware
Impact
Geneko GWR routers allow directory traversal sequences starting with a /../ substring, as demonstrated by unauthenticated read access to the configuration file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Geneko | Gwr352 3g Router Firmware | All versions |
| Geneko | Gwr352wv Wide Voltage 3g Router Firmware | All versions |
| Geneko | Gwr252 Edge Router Firmware | All versions |
| Geneko | Gwr202 Gprs Router Firmware | All versions |