A path traversal attack in web interfaces of Netgear...
High severity
Unreviewed
Published
Dec 10, 2021
to the GitHub Advisory Database
•
Updated Feb 1, 2023
Description
Published by the National Vulnerability Database
Dec 9, 2021
Published to the GitHub Advisory Database
Dec 10, 2021
Last updated
Feb 1, 2023
A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted HTTP packet.
References