Security Advisory
CVE-2021-23242
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ to the UPnP server, as demonstrated by the /../../conf/template/uhttpd.json URI.