Ravpower Filehub Firmware vulnerabilities

CVE-2018-5997 [CRITICAL] CWE-22 CVE-2018-5997: An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upl An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root.

CVE-2018-5319 [HIGH] CWE-200 CVE-2018-5319: RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP req RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request.