CVE-2017-11587

CVE-2017-11587 affects Cisco DDR2200 ADSL2+ and DDR2201v1 ADSL2+ Residential Gateways. A directory traversal flaw exists in the filename parameter to the /download.conf URI, allowing potential access to arbitrary files on affected devices. Multiple sources (NVD entry and CNVD/CVE records) corrobo...