httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11440
Reference (s):
- https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2020-11440
- https://windriver.com