CVE-2017-15805: Path Traversal
Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory traversal in scgi-bin/platform.cgi via the thispage parameter, for reading arbitrary files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15805?
CVE-2017-15805 is classified as a medium severity vulnerability due to its potential for directory traversal attacks allowing unauthorized file access.
How do I fix CVE-2017-15805?
To fix CVE-2017-15805, update the Cisco Small Business SA520 or SA540 devices to a non-vulnerable firmware version beyond 2.2.0.7.
What devices are affected by CVE-2017-15805?
The affected devices under CVE-2017-15805 include Cisco Small Business SA520 and SA540 models running firmware versions 2.1.71 or 2.2.0.7.
What type of attack can exploit CVE-2017-15805?
CVE-2017-15805 can be exploited through a directory traversal attack, allowing the reading of arbitrary files on the affected devices.
What parameters are involved in CVE-2017-15805?
CVE-2017-15805 involves the 'thispage' parameter in scgi-bin/platform.cgi which is used to perform the directory traversal.