CVE-2005-3484: Nero Neronet

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in NeroNET 1.2.0.2 and earlier allows remote attackers to read arbitrary files with certain file extensions (such as ZIP, AVI, JPG, TXT, and HTML) via ".." and hex-encoded (1) slash "/" ("%2f") or (2) backslash "\" ("%5c") sequences.

Affected products

• Nero Neronet: up to and including 1.2.0.2

Published 2005-11-03. Last modified 2026-06-16.