Vulnerabilities > Yawcam > Yawcam > 0.3.6

DATE CVE VULNERABILITY TITLE RISK
2018-01-10 CVE-2017-17662 Path Traversal vulnerability in Yawcam
Directory traversal in the HTTP server on Yawcam 0.2.6 through 0.6.0 devices allows attackers to read arbitrary files through a sequence of the form '.x./' or '....\x/' where x is a pattern composed of one or more (zero or more for the second pattern) of either \ or ..\ -- for example a '.\./', '....\/' or '...\./' sequence.
network
low complexity
yawcam CWE-22
5.0