CVE-2017-5168

CVE-2017-5168 is a critical path traversal vulnerability affecting Hanwha Techwin Smart Security Manager versions 1.5 and prior, specifically within the ActiveMQ Broker service. This flaw allows an unauthenticated attacker to gain access to arbitrary files and potentially achieve remote code execution if a user visits a malicious page. With a CVSS score of 7.5 (HIGH), exploitation requires user interaction but can lead to high impact on confidentiality, integrity, and availability. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.