Sign-up

ID

VAR-201707-0529


CVE

CVE-2017-11456


TITLE

Geneko GWR Router Path Traversal Vulnerability

Trust: 1.2

sources: CNVD: CNVD-2017-25434 // CNNVD: CNNVD-201707-902

DESCRIPTION

Geneko GWR routers allow directory traversal sequences starting with a /../ substring, as demonstrated by unauthenticated read access to the configuration file. Geneko GWR A path traversal vulnerability exists in the router.Information may be obtained. GenekoGWRrouters is a router device. GenekoGWRrouters has a directory traversal vulnerability that allows remote attackers to exploit vulnerabilities to submit specially crafted requests for system file content. Geneko GWR routers is a router device of Geneko company in the Republic of Serbia

Trust: 2.34

sources: NVD: CVE-2017-11456 // JVNDB: JVNDB-2017-005921 // CNVD: CNVD-2017-25434 // VULHUB: VHN-101880 // VULMON: CVE-2017-11456

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2017-25434

AFFECTED PRODUCTS

vendor:genekomodel:gwr202 gprs routerscope:eqversion: -

Trust: 1.6

vendor:genekomodel:gwr352 3g routerscope:eqversion: -

Trust: 1.6

vendor:genekomodel:gwr352wv wide voltage 3g routerscope:eqversion: -

Trust: 1.6

vendor:genekomodel:gwr252 edge routerscope:eqversion: -

Trust: 1.6

vendor:genekomodel:gwr202 gprs routerscope: - version: -

Trust: 0.8

vendor:genekomodel:gwr252 edge routerscope: - version: -

Trust: 0.8

vendor:genekomodel:gwr352 3g routerscope: - version: -

Trust: 0.8

vendor:genekomodel:gwr352wv wide voltage 3g routerscope: - version: -

Trust: 0.8

vendor:genekomodel:gwr routersscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2017-25434 // JVNDB: JVNDB-2017-005921 // CNNVD: CNNVD-201707-902 // NVD: CVE-2017-11456

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2017-11456
value: HIGH

Trust: 1.0

NVD: CVE-2017-11456
value: HIGH

Trust: 0.8

CNVD: CNVD-2017-25434
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201707-902
value: MEDIUM

Trust: 0.6

VULHUB: VHN-101880
value: MEDIUM

Trust: 0.1

VULMON: CVE-2017-11456
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2017-11456
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

CNVD: CNVD-2017-25434
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-101880
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2017-11456
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.0

Trust: 1.8

sources: CNVD: CNVD-2017-25434 // VULHUB: VHN-101880 // VULMON: CVE-2017-11456 // JVNDB: JVNDB-2017-005921 // CNNVD: CNNVD-201707-902 // NVD: CVE-2017-11456

PROBLEMTYPE DATA

problemtype:CWE-22

Trust: 1.9

sources: VULHUB: VHN-101880 // JVNDB: JVNDB-2017-005921 // NVD: CVE-2017-11456

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201707-902

TYPE

path traversal

Trust: 0.6

sources: CNNVD: CNNVD-201707-902

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2017-005921

EXPLOIT AVAILABILITY
sources:
            
            
            VULHUB: VHN-101880 // 
            
            
            
            VULMON: CVE-2017-11456

PATCH
title:GWR352WV - Wide Voltageurl:http://www.geneko.rs/en/products/m2m-products-and-solutions/gwr-cellular-router-series/gwr352wv-wide-voltage/related-products-20.html
Trust: 0.8
title:GWR352 - 3G routerurl:http://www.geneko.rs/en/products/m2m-products-and-solutions/gwr-cellular-router-series/gwr352-3g-router/resources-9.html
Trust: 0.8
title:GWR202 - GPRS routerurl:http://geneko.rs/en/products/m2m-products-and-solutions/gwr-cellular-router-series/gwr202-gprs-router.html
Trust: 0.8
title:GWR252 - EDGE routerurl:http://www.geneko.rs/en/products/m2m-products-and-solutions/gwr-cellular-router-series/gwr252-edge-router.html
Trust: 0.8
title:GenekoGWR Router Path Traversal Vulnerability Patchurl:https://www.cnvd.org.cn/patchInfo/show/101630
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2017-25434 // 
            
            
            
            JVNDB: JVNDB-2017-005921

EXTERNAL IDS
db:NVDid:CVE-2017-11456
Trust: 3.2
db:JVNDBid:JVNDB-2017-005921
Trust: 0.8
db:CNNVDid:CNNVD-201707-902
Trust: 0.7
db:CNVDid:CNVD-2017-25434
Trust: 0.6
db:EXPLOIT-DBid:44072
Trust: 0.2
db:VULHUBid:VHN-101880
Trust: 0.1
db:VULMONid:CVE-2017-11456
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2017-25434 // 
            
            
            
            VULHUB: VHN-101880 // 
            
            
            
            VULMON: CVE-2017-11456 // 
            
            
            
            JVNDB: JVNDB-2017-005921 // 
            
            
            
            CNNVD: CNNVD-201707-902 // 
            
            
            
            NVD: CVE-2017-11456

REFERENCES
url:https://blogs.securiteam.com/index.php/archives/3317#more-3317
Trust: 2.6
url:https://nvd.nist.gov/vuln/detail/cve-2017-11456
Trust: 1.4
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-11456
Trust: 0.8
url:https://cwe.mitre.org/data/definitions/22.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
url:https://www.exploit-db.com/exploits/44072/
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2017-25434 // 
            
            
            
            VULHUB: VHN-101880 // 
            
            
            
            VULMON: CVE-2017-11456 // 
            
            
            
            JVNDB: JVNDB-2017-005921 // 
            
            
            
            CNNVD: CNNVD-201707-902 // 
            
            
            
            NVD: CVE-2017-11456

SOURCES
db:CNVDid:CNVD-2017-25434
db:VULHUBid:VHN-101880
db:VULMONid:CVE-2017-11456
db:JVNDBid:JVNDB-2017-005921
db:CNNVDid:CNNVD-201707-902
db:NVDid:CVE-2017-11456

LAST UPDATE DATE
2025-04-20T23:26:03.338000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2017-25434date:2017-09-06T00:00:00
db:VULHUBid:VHN-101880date:2017-07-25T00:00:00
db:VULMONid:CVE-2017-11456date:2017-07-25T00:00:00
db:JVNDBid:JVNDB-2017-005921date:2017-08-09T00:00:00
db:CNNVDid:CNNVD-201707-902date:2017-07-20T00:00:00
db:NVDid:CVE-2017-11456date:2025-04-20T01:37:25.860

SOURCES RELEASE DATE
db:CNVDid:CNVD-2017-25434date:2017-09-06T00:00:00
db:VULHUBid:VHN-101880date:2017-07-19T00:00:00
db:VULMONid:CVE-2017-11456date:2017-07-19T00:00:00
db:JVNDBid:JVNDB-2017-005921date:2017-08-09T00:00:00
db:CNNVDid:CNNVD-201707-902date:2017-07-20T00:00:00
db:NVDid:CVE-2017-11456date:2017-07-19T07:29:00.627