All packages
Cisco DDR2200 ADSL2+ Residential Gateway, Cisco DDR2201v1 ADSL2+ Residential Gateway vulnerabilities
3 known CVE vulnerabilities in Cisco DDR2200 ADSL2+ Residential Gateway, Cisco DDR2201v1 ADSL2+ Residential Gateway, translated and rated.
- CVE-2017-11587High
There is a directory traversal vulnerability in the filename parameter to the /download.conf URI on Cisco DDR2200 and DDR2201v1 devices.
- CVE-2017-11589Critical
On Cisco DDR2200 and DDR2201v1 devices, there is no access control for several configuration files, which may lead to unauthorized access to sensitive information.
- CVE-2017-11588Critical
Cisco DDR2200 and DDR2201v1 devices are vulnerable to remote command execution via shell metacharacters in the pingAddr parameter to the waitPingqry.cgi URI. The command output is visible in /PingMsg.cmd.