Security Advisory

CVE-2018-5997

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-01-25 17:00:00

Last updated 2024-08-05 05:47:56

Assigner mitre

State PUBLISHED

Description

An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root.

← Browse all CVEs View on cve.org ↗