CVE-2019-6268 – RAD SecFlow-2 Path Traversal

https://notcve.org/view.php?id=CVE-2019-6268

05 Mar 2024 — RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow. Los dispositivos RAD SecFlow-2 con Hardware 0202, Firmware 4.1.01.63 y U-Boot 2010.12 permiten URI que comienzan con /.. para Directory Traversal, como se demuestra al leer /etc/shadow. RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 suffer from a directory traversal vulnerability. • https://packetstorm.news/files/id/177440 • CWE-31: Path Traversal: 'dir\..\..\filename' •