Zyxel Armor X1 WAP6806 Directory Traversal

Exploit Title: Zyxel Armor X1 WAP6806 - Directory Traversal Date: 2020-06-19 Exploit Author: Rajivarnan R Vendor Homepage: https://www.zyxel.com/ Software http://www.zyxelguard.com/WAP6806.asp Version: V1.00ABAL.6C0 CVE: 2020-14461 Tested on: Linux Mint / Windows 10 Vulnerabilities Discovered Dat...

CVE-2020-14461

CVE-2020-14461 affects Zyxel Armor X1 WAP6806, version 1.00(ABAL.6)C0. The vulnerability is a directory traversal via the images/eaZy/ URI, allowing access to locations outside of a restricted directory. CVSS details in the primary entry indicate a high-severity impact (CVSSv3.1 base 8.6) with ne...