CVE-2016-1525
Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read…
published February 13, 2016
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.
What it is
Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a .. (dot dot) in the realName parameter.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.75013 · 99.5th percentile
- Published
- 2016-02-13T02:00Z
EPSS history
Timeline