The vulnerability of the HTTP-server of the microprogramming software for the multifunctional device RAVPower FileHub allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the HTTP-server of the microprogramming-based multifunctional device RAVPower FileHub exists due to insufficient restrictions on the path name to the restricted directory, and the absence of restrictions on file downloads. Exploiting this vulnerability allows a malicious acto...