Lantronix PremierWave 2050 Path Traversal Vulnerability (CNVD-2022-01594)

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 version 8.9.0.0R4 is vulnerable to a path traversal vulnerability caused by a lack of filtering and escaping of path parameters by the Web Manager file upload function. An attacker could exploit the vulnerability to cause arbitrary file overwrites.