CVE-2016-10106

Published: Jan 3, 2017Modified: May 6, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Directory traversal vulnerability in scgi-bin/platform.cgi on NETGEAR FVS336Gv3, FVS318N, FVS318Gv2, and SRX5308 devices with firmware before 4.3.3-8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the thispage parameter, as demonstrated by reading the /etc/shadow file.

Affected (4)

Products: Netgear: Fvs336gv3 Firmware, Srx5308 Firmware, Fvs318gv2 Firmware, Fvs318n Firmware

4 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Fvs336gv3 Firmware	Up to 4.3-3.6

Running on/with	Platform Versions
Netgear Fvs336gv3	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Srx5308 Firmware	Up to 4.3-3.6

Running on/with	Platform Versions
Netgear Srx5308	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Fvs318gv2 Firmware	Up to 4.3-3.6

Running on/with	Platform Versions
Netgear Fvs318gv2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Fvs318n Firmware	Up to 4.3-3.6

Running on/with	Platform Versions
Netgear Fvs318n	All versions

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (8)

http://kb.netgear.com/30739/Path-Traversal-Attack-Security-Vulnerability

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/95204

Source: cve@mitre.org

http://www.securitytracker.com/id/1037548

Source: cve@mitre.org

https://twitter.com/mantislesin/status/816618162770821120

Source: cve@mitre.org

http://kb.netgear.com/30739/Path-Traversal-Attack-Security-Vulnerability

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/95204

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1037548

Source: af854a3a-2127-422b-91ae-364da2661108

https://twitter.com/mantislesin/status/816618162770821120

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.