Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RAVPower Filehub HTTP Server 路径遍历漏洞
Vulnerability Description
RAVPower FileHub是美国RAVPower公司的一款多功能数码设备。该设备同时具有读卡器、USB存储以及NAS文件服务器等功能。HTTP Server是其中的一个HTTP服务器。 RAVPower Filehub 2.000.056版本中的HTTP Server存在路径遍历漏洞。远程攻击者可利用该漏洞以root权限向文件系统上传文件并以同样的权限执行代码。
CVSS Information
N/A
Vulnerability Type
N/A