CVE-2017-16936: Path Traversal

Published Nov 24, 2017

Updated

Directory Traversal vulnerability in appdatacenter on Shenzhen Tenda Ac9 USAC9V1.0BRV15.03.05.14multiTD01, Ac9 ac9kfV15.03.05.19(6318)cn, Ac15 USAC15V1.0BRV15.03.05.18multiTD01, Ac15 USAC15V1.0BRV15.03.05.19multiTD01, Ac18 USAC18V1.0BRV15.03.05.05multiTD01, and Ac18 ac18kfV15.03.05.19(6318)cn devices allows remote unauthenticated attackers to read arbitrary files via a cgi-bin/luci/request?op=1&path= URI that uses directory traversal sequences after a /usb/ substring.

Affected Software

9 affected components

Tenda Ac9 Firmware=us_ac9v1.0br_v15.03.05.14_multi_td01

Tenda Ac9

Tenda Ac9 Firmware=ac9_kf_v15.03.05.19\(6318_\)_cn

Tenda ac15 firmware=us_ac15v1.0br_v15.03.05.18_multi_td01

Tenda Ac15

Tenda ac15 firmware=us_ac15v1.0br_v15.03.05.19_multi_td01

Tenda Ac18 Firmware=us_ac18v1.0br_v15.03.05.05_multi_td01

Tenda Ac18

Tenda Ac18 Firmware=ac18_kf_v15.03.05.19\(6318_\)_cn

Event History

Nov 24, 2017

CVE Published

via MITRE·07:00 AM

Data Sourced

via MITRE·07:00 AM

Description

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2017-16936.

What is the severity of CVE-2017-16936?

The severity of CVE-2017-16936 is medium with a CVSS score of 6.5.

Which software versions are affected by CVE-2017-16936?

The following software versions are affected by CVE-2017-16936: Tenda Ac9 Firmware (us_ac9v1.0br_v15.03.05.14_multi_td01), Tenda Ac9 Firmware (ac9_kf_v15.03.05.19(6318_)_cn), Tenda ac15 firmware (us_ac15v1.0br_v15.03.05.18_multi_td01), Tenda ac15 firmware (us_ac15v1.0br_v15.03.05.19_multi_td01), Tenda Ac18 Firmware (us_ac18v1.0br_v15.03.05.05_multi_td01), and Tenda Ac18 Firmware (ac18_kf_v15).

How does the vulnerability manifest?

The vulnerability manifests as a directory traversal vulnerability in the app_data_center.

Is Tenda AC9 and Tenda AC15 affected by the vulnerability?

Tenda AC9 and Tenda AC15 are not affected by the vulnerability.