CVE-2018-16739

An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges...

CVE-2018-16739

The CVE-2018-16739 vulnerability affects ABUS TVIP devices due to a path traversal in the /opt/cgi/admin/filewrite endpoint. The issue allows an attacker to write arbitrary files and execute code with root privileges, as indicated by the described impact (root, high confidentiality/availability/i...