CVE-2017-9097
Last modified
CVE-2017-9097 is a vulnerability of currently unknown severity. In Anti-Web through 3.8.7, as used on NetBiter FGW200 devices through 3.21.2, WS100 devices through 3.30.5, EC150 devices through 1.40.0, WS200 devices through 3.30.4, EC250 devices through 1.40.0, and other products, an LFI vulnerability allows a remote attacker to read or modify files through a path traversal technique, as demonstrated by reading the password file, or using the template parameter to cgi-bin/write.cgi to write to an arbitrary file.. EPSS estimates a 3.73% chance of exploitation in the next 30 days.
Description
In Anti-Web through 3.8.7, as used on NetBiter FGW200 devices through 3.21.2, WS100 devices through 3.30.5, EC150 devices through 1.40.0, WS200 devices through 3.30.4, EC250 devices through 1.40.0, and other products, an LFI vulnerability allows a remote attacker to read or modify files through a path traversal technique, as demonstrated by reading the password file, or using the template parameter to cgi-bin/write.cgi to write to an arbitrary file.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Hoytech | Antiweb | <= 3.8.7 | — |
| Hoytech | Antiweb | 3.0.7 | Hms2 |
| Hoytech | Antiweb | 3.3.5 | — |
| Hoytech | Antiweb | 3.6.1 | — |
| Hoytech | Antiweb | 3.7.1 | — |
| Hoytech | Antiweb | 3.7.2 | — |
| Hoytech | Antiweb | 3.8.1 | — |
| Hoytech | Antiweb | 3.8.2 | — |
| Hoytech | Antiweb | 3.8.3 | — |
| Hoytech | Antiweb | 3.8.4 | — |
| Hoytech | Antiweb | 3.8.5 | — |
References
- http://misteralfa-hack.blogspot.cl/2017/05/apps-industrial-ot-over-server-anti-web.htmlMailing List, Third Party Advisory
- https://github.com/ezelf/industrial_Tools/tree/master/scadas_server_antiweb/LFIThird Party Advisory
- http://misteralfa-hack.blogspot.cl/2017/05/apps-industrial-ot-over-server-anti-web.htmlMailing List, Third Party Advisory
- https://github.com/ezelf/industrial_Tools/tree/master/scadas_server_antiweb/LFIThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-9097?
How severe is CVE-2017-9097?
How do I fix CVE-2017-9097?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-9090reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['…
- CVE-2017-9091/admin/loginc.php in Allen Disk 1.6 doesn't check if isset($…
- CVE-2017-9093The my_skip_input_data_fn function in imagew-jpeg.c in libim…
- CVE-2017-9094The lzw_add_to_dict function in imagew-gif.c in libimagewors…
- CVE-2017-9095XXE in Diving Log 6.0 allows attackers to remotely view loca…5.5
- CVE-2017-9096The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 …
- CVE-2017-9098ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 …7.5
- CVE-2017-9100login.cgi on D-Link DIR-600M devices with firmware 3.04 allo…8.8
- CVE-2017-9101import.php (aka the Phonebook import feature) in PlaySMS 1.4…
- CVE-2017-9103An issue was discovered in adns before 1.5.2. pap_mailbox822…9.8
- CVE-2017-9104An issue was discovered in adns before 1.5.2. It hangs, eati…9.8
- CVE-2017-9105An issue was discovered in adns before 1.5.2. It corrupts a …8.8
Are you affected by CVE-2017-9097?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST