High severity7.5NVD Advisory· Published Oct 8, 2019· Updated Jun 17, 2026

CVE-2019-17187

Description

/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication Directory Traversal for reading arbitrary files.

Affected products

Fiberhome/HG2201Tllm-fuzzy
Range: 1.00.M5007_JS_201804
FiberHome/HG2201Tdescription
Fiberhome/Hg2201t Firmware
cpe:2.3:o:fiberhome:hg2201t_firmware:1.00.m5007_js_201804:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

gist.github.com/ztz472947849/d62e7b6f4831b55c338ef22432eca06dnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.009
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000