CVE-2018-14942: Harmonicinc Nsg 9000 Firmware

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

Harmonic NSG 9000 devices allow remote authenticated users to conduct directory traversal attacks, as demonstrated by "POST /PY/EMULATION_GET_FILE" or "POST /PY/EMULATION_EXPORT" with FileName=../../../passwd in the POST data.

Affected products

• Harmonicinc Nsg 9000 Firmware: affected versions not specified

Published 2018-08-05. Last modified 2026-06-17.