CVE-2017-16936

Published Nov 24, 2017

Last updated 7 years ago

CVSS medium 6.5

Overview

Description: Directory Traversal vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01, and Ac18 ac18_kf_V15.03.05.19(6318_)_cn devices allows remote unauthenticated attackers to read arbitrary files via a cgi-bin/luci/request?op=1&path= URI that uses directory traversal sequences after a /usb/ substring.
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 3.0

Type: Primary
Base score: 6.5
Impact score: 3.6
Exploitability score: 2.8
Vector string: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: MEDIUM

CVSS 2.0

Type: Primary
Base score: 3.3
Impact score: 2.9
Exploitability score: 6.5
Vector string: AV:A/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: CWE-22

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:tenda:ac9_firmware:us_ac9v1.0br_v15.03.05.14_multi_td01:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A892AC99-F24B-4E0F-B3F0-CDBE1F4AD446"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:tenda:ac9:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "2FD1430E-DC2E-4042-9389-1FD90ECDBE4D"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:tenda:ac9_firmware:ac9_kf_v15.03.05.19\\(6318_\\)_cn:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "512EB7D7-B12E-4219-8270-9EFCC8F6F366"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:tenda:ac9:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "2FD1430E-DC2E-4042-9389-1FD90ECDBE4D"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:tenda:ac15_firmware:us_ac15v1.0br_v15.03.05.18_multi_td01:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6A51B455-6ABD-4827-B948-7341D353C05E"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:tenda:ac15_firmware:us_ac15v1.0br_v15.03.05.19_multi_td01:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9535D5AC-FCE6-40A9-BA55-10DFE110BBBC"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "B73E7C1C-F121-486A-8B15-E97EA0C219A5"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:tenda:ac18_firmware:us_ac18v1.0br_v15.03.05.05_multi_td01:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "35D8463B-CC09-4C38-9881-4D7E3EC2B635"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "CF9F8AF9-F921-4348-922B-EE5E6037E7AC"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:tenda:ac18_firmware:ac18_kf_v15.03.05.19\\(6318_\\)_cn:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "72C6CF57-11B7-4A11-AA61-248ACAFE624C"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "CF9F8AF9-F921-4348-922B-EE5E6037E7AC"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Social media

Configurations

References