high7.5Public exploit code
CVE-2017-15647
On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FiberHome - Directory Traversal2017-10-13 · webapps · linux
Impact
On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fiberhome | Routerfiberhome Firmware | All versions |