Netgear SPH200D Path Traversal Vulnerability

A path traversal vulnerability has been identified in the Netgear SPH200D Skype phone, specifically in firmware versions through 1.0.4.80. This vulnerability resides in the device's embedded web server, where authenticated attackers can exploit crafted GET requests to access arbitrary files outside the web root. By injecting traversal sequences, sensitive system files and configuration data can be exposed.

Impact

Exploitation of this vulnerability allows for unauthorized access to sensitive files and configuration data on the device.

Reproduction

The vulnerability can be reproduced by sending authenticated GET requests that include traversal sequences. This can be done using the Metasploit framework, with a module available that automates the exploitation process. The module requires a file list of sensitive files to be specified, along with valid login credentials for the device.