CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2017-11456
Geneko GWR routers allow directory traversal sequences starting with a /../ substring, as demonstrated by unauthenticated read access to the configuration file.
Severity
- EPSS
- 8.8% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- geneko:gwr202_gprs_router_firmware
- geneko:gwr252_edge_router_firmware
- geneko:gwr352_3g_router_firmware
- geneko:gwr352wv_wide_voltage_3g_router_firmware