high7.5Public exploit code
CVE-2017-9024
Secure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor (SCA) 3.0, has a Directory Traversal issue in its TFTP Server, allowi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Secure Auditor 3.0 - Directory Traversal2017-05-20 · remote · windows
Impact
Secure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor (SCA) 3.0, has a Directory Traversal issue in its TFTP Server, allowing attackers to read arbitrary files via ../ sequences in a pathname.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Secure-Bytes | Secure Cisco Auditor | Version 3.0 |