CVE-2017-20184

CVE-2017-20184 affects Carlo Gavazzi Powersoft (versions up to 2.1.1.1). The root cause is improper limitation of a pathname to a restricted directory (path traversal), enabling an unauthenticated, remote attacker to download arbitrary files from the affected device. Public sources in connected d...