CVE:CVE-2017-11456
CNNVD:CNNVD-201707-902
Geneko GWR routers是塞尔维亚共和国Geneko公司的一款路由器设备。
Geneko GWR路由器中存在路径遍历漏洞。远程攻击者可借助以‘/../’子字符串开头的目录遍历序列利用漏洞读取主机上的任意文件。
solution:Upgrade geneko gwr352_3g_router_firmware to a higher version than -; Upgrade geneko gwr352wv_wide_voltage_3g_router_firmware to a higher version than -; Upgrade geneko gwr252_edge_router_firmware to a higher version than -; Upgrade geneko gwr202_gprs_router_firmware to a higher version than -