Appear TV XC5000 and XC5100 Arbitrary File Read (CVE-2018-7539)

A vulnerability exists in Appeartv xc5000 firmware 3.26.217. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

CVE-2018-7539

CVE-2018-7539 affects Appear TV XC5000 and XC5100 devices running firmware 3.26.217. The web server (fuzzd/0.1.1) in Maintenance Center on port 8088 is vulnerable to a directory-traversal attack using crafted URLs (e.g., GET /../../../../../../../../../../../../etc/passwd), allowing an attacker t...