CVE-2016-10106

Directory traversal vulnerability in scgi-bin/platform.cgi on NETGEAR FVS336Gv3, FVS318N, FVS318Gv2, and SRX5308 devices with firmware before 4.3.3-8 allows remote authenticated users to read arbitrary files via a .. dot dot in the thispage parameter, as demonstrated by reading the /etc/shadow fi...

CVE-2016-10106

The CVE-2016-10106 entry affects NETGEAR devices (FVS336Gv3, FVS318N, FVS318Gv2, SRX5308). A directory traversal flaw exists in scgi-bin/platform.cgi that lets remote authenticated users read arbitrary files via a .. in the thispage parameter, demonstrated by reading /etc/shadow. Affected firmwar...