Medium severityNVD Advisory· Published Aug 1, 2025· Updated Apr 15, 2026
CVE-2013-10063
CVE-2013-10063
Description
A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware versions <= 1.0.4.80 in its embedded web server. Authenticated attackers can exploit crafted GET requests to access arbitrary files outside the web root by injecting traversal sequences. This can expose sensitive system files and configuration data.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/netgear_sph200d_traversal.rbnvd
- web.archive.org/web/20130207034706/http://www.s3cur1ty.de/m1adv2013-002nvd
- www.exploit-db.com/exploits/24441nvd
- www.vulncheck.com/advisories/netgear-sph200d-path-traversal-via-http-getnvd
News mentions
0No linked articles in our index yet.