CVE-2017-7577

CVE-2017-7577 describes a critical directory traversal vulnerability in XiongMai uc-httpd, allowing unauthenticated attackers to read arbitrary files via specially crafted HTTP GET requests. With a CVSS score of 9.8, this flaw presents a high risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, its high FAUCET Risk Score of 83/100 and mentions in security media like SecurityWeek indicate its significance. Despite its age, there is no public exploit code available in Metasploit, Nuclei, or ExploitDB, suggesting limited active exploitation or public tooling.