CVE-2017-9097

CVE-2017-9097 is a critical Local File Inclusion (LFI) vulnerability affecting Anti-Web through version 3.8.7, present in various NetBiter and EC series devices. This flaw allows unauthenticated remote attackers to read or modify arbitrary files on affected systems via path traversal, potentially leading to the disclosure of sensitive information like password files or arbitrary file writes. With a CVSS score of 9.1 (CRITICAL), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, resulting in high impact to confidentiality and integrity. While there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable, and it is not listed in CISA's KEV catalog; however, it has garnered significant community discussion with 10 mentions.