CVE-2021-23242

Publication date

2021-01-07 20:19:22

Family

mitre

State

PUBLISHED

Description

MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ to the UPnP server, as demonstrated by the /../../conf/template/uhttpd.json URI.