Lantronix PremierWave 2050 Path Traversal Vulnerability (CNVD-2022-01589)

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. A path traversal vulnerability exists in the Lantronix PremierWave 2050, which stems from a lack of effective restriction and filtering of directory access by the software-focused Web Manager FsTFtp feature. An attacker could exploit the vulnerability by initiating an authenticated HTTP request to overwrite the FsTFtp file with an arbitrary file.