CVE-2018-16739: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges...

PT-2023-10695 · Abus · Abus Tvip

Name of the Vulnerable Software and Affected Versions: ABUS TVIP devices affected versions not specified Description: An issue was discovered on certain ABUS TVIP devices due to a path traversal in the /opt/cgi/admin/filewrite API endpoint. This allows an attacker to write to files and thus execu...