SAE IT-systems FW-50 Remote Telemetry Unit (RTU)
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is served to other users. A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible.