Security Advisory
CVE-2016-10106
6.5
MEDIUM
Vulnerability Description
Directory traversal vulnerability in scgi-bin/platform.cgi on NETGEAR FVS336Gv3, FVS318N, FVS318Gv2, and SRX5308 devices with firmware before 4.3.3-8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the thispage parameter, as demonstrated by reading the /etc/shadow file.
Published Date
January 3, 2017
Official Source
NIST NVD Advisory