CVE-2018-16739: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges...