| Title | Edimax BR-6208AC V2_1.02 Absolute Path Traversal |
|---|
| Description | A Path Traversal Vulnerability has been discovered in the FTP daemon service of DIMAX BR-6208AC_V2_1.02 firmware. The vulnerability exists in the handle_retr function within the FTPd implementation, which fails to properly validate and sanitize user-supplied file paths during file retrieval operations. This allows authenticated attackers to read arbitrary files from the filesystem, potentially exposing sensitive configuration files, passwords, and system information. |
|---|
| Source | ⚠️ https://tzh00203.notion.site/EDIMAX-BR-6208AC-V2_1-02-Path-Traversal-Vulnerability-in-FTPd-2c4b5c52018a80fb8812f7d510abf558?source=copy_link |
|---|
| User | tian (UID 93438) |
|---|
| Submission | 12/12/2025 04:16 (10 months ago) |
|---|
| Moderation | 12/18/2025 19:34 (7 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 337435 [Edimax BR-6208AC 1.02 FTP Daemon Service handle_retr path traversal] |
|---|
| Points | 17 |
|---|