[FD] SSD Advisory – Geneko Routers Unauthenticated Path Traversal

Hi, SSD Advisory – Geneko Routers Unauthenticated Path Traversal *Link*: http://ift.tt/2tWVngm *Twitter*: @SecuriTeam_SSD *Vulnerability Summary* The following advisory describes a Unauthenticated Path Traversal vulnerability found in Geneko GWR routers series. Geneko GWG is compact and cost effective communications solution that provides cellular capabilities for fixed and mobile applications such as data acquisition, smart metering, remote monitoring and management. GWG supports a variety of radio bands options on 2G, 3G and 4G cellular technologies. *Credit* An independent security researcher, Patrik Fehrenbach (@ITSecurityguard), has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program *Vendor response* We have informed Geneko of the vulnerability on the 28th of May 2017, the last email we received from them was on the 7th of June 2017. We have no further updates from Geneko regarding the availability of a patch or a workaround for the vulnerability.

Source: Gmail -> IFTTT-> Blogger