Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in portalgroups/portalgroups/getfile.cgi in IP3 NetAccess before firmware 4.1.9.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IP3 NetAccess远程目录遍历漏洞
Vulnerability Description
IP3 NetAccess是一款高性能的网关，可处理Internet接入并提供防火墙、计费、限速、认证等服务。 NetAccess设备在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞远程遍历服务器目录访问任意文件。 NetAccess的getfile.cgi脚本没有正确检查过滤filename参数数据，远程攻击者可以在输入数据中插入类似"../../../"的目录遍历串，允许未经认证的远程攻击者利用Web接口读取远程系统上的任意文件，包括/etc/shadow，因此可以完全入侵设备。此外攻击者还
CVSS Information
N/A
Vulnerability Type
N/A