CVE-2017-16610

CRITICAL

Netgain Enterprise Manager < 7.2.766 - Unauthenticated Path Traversal and Arbitrary File Write via upload_save_do.jsp

Title source: llm

Description

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within upload_save_do.jsp. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of the current user. Was ZDI-CAN-4751.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry x_refsource_misc

https://zerodayinitiative.com/advisories/ZDI-17-952

Third Party Advisory x_refsource_misc

https://www.tenable.com/security/research/tra-2018-02

Scores

CVSS v3 9.8

EPSS 0.0494

EPSS Percentile 91.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-22 CWE-668

Status published

Products (1)

netgain-systems/enterprise_manager < 7.2.766

Published Jan 23, 2018

Tracked Since Feb 18, 2026