Zyxel networking devices File Upload Unauthorized Access

The vulnerability of the fileupload-cgi CGI script of the Zyxel networking device lies in an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...