CVE-2017-16604

CVE-2017-16604 is a path traversal vulnerability in NetGain Systems Enterprise Manager 7.2.730 build 1034, allowing remote attackers to overwrite arbitrary files. Although authentication is typically required, the mechanism can be bypassed, and the flaw resides in the deviceReport_005fexport_005fdo_jsp servlet. With a CVSS score of 6.5 (Medium), this vulnerability has a low attack complexity and high impact on integrity, as an attacker can overwrite any files accessible to the Administrator. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.