← Back

Cdpenergy

cdpenergy

1 CVE • 2 products

Products (2)

Click to collapse
Toggle
Snmp Web Pro Firmware
snmp_web_pro_firmware
1 CVE
Snmp Web Pro
snmp_web_pro
0 CVEs

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-65287
1Cdpenergy
1Snmp Web Pro Firmware
Jun 17, 2026
Dec 9, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
An unauthenticated directory traversal vulnerability in cgi-bin/upload.cgi in SNMP Web Pro 1.1 allows a remote attacker to read arbitrary files. The CGI concatenates the user-supplied params directly onto the base path (...Show more
An unauthenticated directory traversal vulnerability in cgi-bin/upload.cgi in SNMP Web Pro 1.1 allows a remote attacker to read arbitrary files. The CGI concatenates the user-supplied params directly onto the base path (/var/www/files/userScript/) using memcpy + strcat without validation or canonicalization, enabling ../ sequences to escape the intended directory. The download branch also echoes the unsanitized params into Content-Disposition, introducing header-injection risk.Show less