Summary: BWA DiREX-Pro 1.2181 devices allow full path disclosure via an invalid name array parameter to val_soft.php3.Published: Monday, March 9, 2020 - 19:15cvss: 5.0