CVE-2017-15647
CVE-2017-15647
Vexday Risk Score
43Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 26.6%KEV nãoPoC públicaNuclei simMetasploit —Patch —
Lifecycle
13 Oct 2017Public PoC
19 Oct 2017Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/44054unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.