CVE-2017-7240

CVE-2017-7240 describes a directory traversal vulnerability in the Miele Professional PST10 WebServer, affecting various PG8527, PG8528, PG8535, and PG8536 devices across specific firmware versions. An unauthenticated attacker can exploit this flaw to access sensitive system files, such as /etc/shadow, potentially aiding in further attacks. Rated with a CVSS score of 7.5 (HIGH), this vulnerability has a network attack vector and low attack complexity, requiring no user interaction. The primary impact is high confidentiality compromise, allowing unauthorized access to critical information. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB (EDB-41718). Despite this, there is minimal community discussion or media coverage surrounding this CVE.