Wireless Control System contains an unspecified flaw that may allow a malicious user to read and write arbitrary files if the path chosen for the root of the TFTP server contains a space. It is possible that the flaw may allow arbitrary file manipulation by a remote attacker resulting in a loss of integrity.
Classification
Location:
Remote / Network Access,
Wireless Vector
Attack Type:
Information Disclosure,
Misconfiguration
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
OSVDB:
Web Related
Solution
Upgrade to version 3.2(63) or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
