The vulnerability of the HTTP-server of the microprogramming software for the multifunctional device RAVPower FileHub allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the HTTP-server of the microprogramming-based multifunctional device RAVPower FileHub exists due to insufficient restrictions on the path name to the restricted directory, and the absence of restrictions on file downloads. Exploiting this vulnerability allows a malicious acto...

RAVPower Filehub Remote Code Execution Vulnerability

RAVPower FileHub is a multifunctional digital device from RAVPower USA. The device also functions as a card reader, USB storage, and NAS file server.HTTP Server is one of the ... A remote code execution vulnerability exists in RAVPower Filehub. A remote attacker can use this vulnerability to uplo...

CVE-2018-5997

An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root...

Path traversal

An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root...

CVE-2018-5997

An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root...

CVE-2018-5997

An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root...

CVE-2018-5997

The CVE-2018-5997 vulnerability affects RAVPower FileHub (firmware 2.000.056) HTTP Server, enabling an unrestricted upload combined with path traversal to write files on the filesystem with root privileges, leading to remote root code execution. Exploitation is evidenced by multiple sources (CNVD...

CVE-2018-5997: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root...

RAVPower FileHub Information Disclosure Vulnerability

The RAVPower FileHub is a multifunctional digital device from RAVPower USA. The device also functions as a card reader, USB storage, and NAS file server. A security vulnerability exists in RAVPower FileHub version 2.000.056. A remote attacker can exploit this vulnerability by sending a specially...

CVE-2018-5319

RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request...

CVE-2018-5319

RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request...

Cross site request forgery (csrf)

RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request...

CVE-2018-5319

RAVPower FileHub 2.000.056 contains a remote information-disclosure vulnerability (memory disclosure) triggered by a crafted HTTP request. Impact: remote attackers can exfiltrate sensitive information. Public exploits exist (e.g., Exploit-DB, PacketStorm). No patch/version remediation details are...

CVE-2018-5319

RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request...

PT-2018-16894

Name of the Vulnerable Software and Affected Versions RAVPower FileHub version 2.000.056 Description The issue allows remote users to steal sensitive information by sending a crafted HTTP request. Recommendations For version 2.000.056, update to a newer version that contains a fix for this issue...

CVE-2018-5319: Exposure of Sensitive Information to an Unauthorized Actor

RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request...

PT-2018-1032

Name of the Vulnerable Software and Affected Versions RAVPower Filehub version 2.000.056 Description The issue is related to the HTTP Server in the RAVPower Filehub, where an unrestricted upload feature and a path traversal vulnerability allow uploading a file on the filesystem with root...