High severity7.5NVD Advisory· Published Jul 19, 2017· Updated May 13, 2026
CVE-2017-11456
CVE-2017-11456
Description
Geneko GWR routers allow directory traversal sequences starting with a /../ substring, as demonstrated by unauthenticated read access to the configuration file.
Affected products
4- cpe:2.3:o:geneko:gwr202_gprs_router_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:geneko:gwr252_edge_router_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:geneko:gwr352_3g_router_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:geneko:gwr352wv_wide_voltage_3g_router_firmware:-:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- blogs.securiteam.com/index.php/archives/3317nvdExploitTechnical Description
News mentions
0No linked articles in our index yet.