CVE-2017-9664

CVE-2017-9664 is a critical path traversal vulnerability affecting ABB SREA-01 (up to 3.31.5) and SREA-50 (up to 3.32.8) remote monitoring tools. An unauthenticated attacker can exploit this flaw over the network using HTTP requests with relative paths (../../) to access internal files, including password hashes. With a CVSS score of 9.8 (CRITICAL), this vulnerability allows for complete compromise of confidentiality, integrity, and availability, as it enables unauthorized file access, password hash retrieval for brute-forcing, and command execution post-authorization. While no active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB) has been identified, and community discussion is minimal, its high severity and ease of exploitation warrant immediate attention.