{"cvss":0.0,"datePublished":"2023-11-13T00:00:00Z","dateUpdated":"2023-11-13T00:00:00Z","description":"/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of \"../..\" using the FILECAMERA variable (sent by GET) to read files with root privileges. NOTE: multiple third parties report that this is a system-integrator issue (e.g., a vulnerability on one type of camera) because Boa does not include any wapopen program or any code to read a FILECAMERA variable.","dueDate":"","id":"CVE-2017-9833","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"boa","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"boa boa Improper Limitation of a Pathname to a Restricted Directory","vendor":"boa"}