Ravpower: >> Filehub Firmware Security Vulnerabilities
An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root.
CVSS Score
9.8
EPSS Score
0.258
Published
2018-01-25
RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request.
CVSS Score
7.5
EPSS Score
0.469
Published
2018-01-24