Threats tagged 'ghsa-3vm4-7j95-xvh6'

A critical path traversal vulnerability exists in Oray Pugongying X5 Pro firmware up to version 7.6.1. The flaw is in the config_restore_ex function of the /etc/openwrt_release file, allowing remote attackers with high privileges to manipulate file paths. Exploit code is publicly available, but the vendor has not responded or provided a fix.