cve/2017/CVE-2017-9024.md

CVE-2017-9024

Description

Secure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor (SCA) 3.0, has a Directory Traversal issue in its TFTP Server, allowing attackers to read arbitrary files via ../ sequences in a pathname.

POC

Reference

• http://hyp3rlinx.altervista.org/advisories/SECURE-AUDITOR-v3.0-DIRECTORY-TRAVERSAL.txt
• https://www.exploit-db.com/exploits/42041/

Github

• https://github.com/ARPSyndicate/cvemon