← Back

Readynas Surveillance Firmware

readynas_surveillance_firmware

Vendor: Netgear • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-18378
1Netgear
1Readynas Surveillance Firmware
Nov 21, 2024
Jun 11, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system() through $tmp_upload_dir, leading to upgrade_handle.php?cmd=writeuploaddir remote co...Show more
In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system() through $tmp_upload_dir, leading to upgrade_handle.php?cmd=writeuploaddir remote command execution.Show less