CVE-2017-6527

CVE-2017-6527 describes a NUL-terminated directory traversal vulnerability in dnaTools dnaLIMS 4-2015s13. This flaw allows an unauthenticated attacker to access arbitrary system files readable by the web server user by manipulating the seqID parameter in viewAppletFsa.cgi. With a CVSS score of 7.5 (HIGH), the vulnerability is easily exploitable over the network with low complexity, potentially leading to significant information disclosure. While not listed on the KEV catalog, public exploit modules exist in Metasploit and ExploitDB, indicating readily available exploit code. Despite this, there is no evidence of active exploitation or significant community discussion or media coverage.