CVE Catalog

CVE-2017-7577

Critical
Published: Translated: NVD NIST

Summary

XiongMai uc-httpd has a directory traversal vulnerability allowing the reading of arbitrary files via a 'GET ../' HTTP request.

Risk Assessment

An attacker could gain access to sensitive data on the server, potentially leading to serious security breaches.

Recommendation

It is recommended to update the software to the latest version and implement appropriate security measures against directory traversal.

Original NVD description (English source)

XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS