~/products/netgear/readynas_surveillance_firmware

pipeline liveDigest Docs

Netgear Readynas Surveillance Firmware vulnerabilities

1 known vulnerability affecting netgear/readynas_surveillance_firmware.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

1

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2017-18378P1CRITICALCVSS 9.8Exploitedfixed in 1.1.4-7fixed in 1.4.3-172019-06-11

CVE-2017-18378 [CRITICAL] CWE-77 CVE-2017-18378: In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is n In NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system() through $tmp_upload_dir, leading to upgrade_handle.php?cmd=writeuploaddir remote command execution.