CVE-2017-15805

https://notcve.org/view.php?id=CVE-2017-15805

Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory traversal in scgi-bin/platform.cgi via the thispage parameter, for reading arbitrary files. Los dispositivos Cisco Small Business SA520 y SA540 con firmware 2.1.71 y 2.2.0.7 permiten el salto de directorio ../ en scgi-bin/platform.cgi mediante el parámetro thispage para leer archivos arbitrarios. • https://www.fwhibbit.es/lfi-en-cisco-small-business-sa500-series-cuando-la-seguridad-de-tu-red-esta-hecha-un-cisco • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •