Path Traversal in Netgear Sph200d
CVE-2013-10063
A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware versions <= 1.0.4.80 in its embedded web server. Authenticated attackers can exploit crafted GET requests to access arbitrary files outside the web root by injecting traversal sequences. This can expose sensitive system files and configuration data.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.009 (55.8th percentile) — read the EPSS interpretation.
Affected products
- Netgear Sph200d — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (technical-description, exploit)
- disclosure@vulncheck.com (third-party-advisory)
Frequently asked questions
- What is CVE-2013-10063?
- CVE-2013-10063 is a vulnerability in Netgear Sph200d, classified under Path Traversal. Published 2025-08-01.
- Is CVE-2013-10063 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.